un virus empeche l'instalation d'un antivirus Résolu

Question

Bonjour,
Alors voila j'ai telecharger un logiciel et quand je l'est installé eih bein mon antivirus a disjoncté il ma signalé plusieur virus puis paf rien du tout il s'est desactivé j'ai essayé de le reinstaller et a chaque fois il me signale que la modification du registre a été désactivé par l'administrateur chose que je n'est pas faite evidemment !et je suis connécté en tant qu'administrateur ah oui aussi je n'est plus acces a HOTMAIL et a certain site il m'affiche des pages blanches alor aidez moi svppppppp.
MERCI D'AVANCE

haha · Answer

c koi le logiciel que tu as installé ?

lili512 · Answer

Heuu winavi pour convertir des video au format mp4 pour pouvoir les lire sur ma psp ah oui j'ai oublié de précisé j'ai installé ce logiciel dans la partition E du disque et j'ai formaté la partition C mais rien a faire !et g pas envi de tt formaté psk j'ai plein de truc que j'ai pas envi de perdre .

haha · Answer

télécharge genproc sur ce site ya un tuto juste en dessus qui t'explique si tu comprend pas

http://www.alt-shift-return.org/Info/GenProc-HowTo.html

haha · Answer

tu dezippe et tappuie sur genproc et tu suis ce qu'il te dit puis il va t'affiché une rapport, en 30secondes et 1mint30

poste le rapport

lili512 · Answer

heu wi dsl pr le retard j'ai rencontré quelque blem de conex j'ai telechargé 7-zip et la jatt que genproc se telecharge

lili512 · Answer

heuu bon je c pas squi spasse mais la j'ai suivis tt les etapes cité dans le site j'ai meme dezziper avc 7-zip mais genproc me signale que des fichiers sont introuvables "impossible de trouver le moteur de script VBScript pour le script C:/document ans settings/****/bureau/genproc/outil/resident.vbs" j'ai supprimer genroc et jles retelecharger comme ils lon precisé dans le site mais tjr les meme fichiers introuvables es normal??

lili512 · Answer

a l'aiiiiiiiiiiiiiiiiiiide j'ai besoin de votre aiiiide

gen-hackman · Answer

salut il faut desactiver l antivirus

lili512 · Answer

jlé desinstaller que faire maintenant?

gen-hackman · Answer

*****************************************************
************** Option 1  (Recherche) **************
*****************************************************


Télécharge FindyKill ( de Chiquitine29) sur ton bureau : 



! Déconnecte toi et ferme toutes applications en cours ! 

* Double clique sur "FindyKill.exe" pour lancer l'installation et laisse les paramètres d'instalation par défaut . 

* Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)

* Double-clique sur le raccourci FindyKill qui est sur ton bureau pour lancer l'outil .
 
* Au menu principal choisis l'option " F " pour français et tape sur [entrée] . 

* Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée] 

Laisse travailler l'outil et ne touche à rien ... 

--> Poste le rapport qui apparait à la fin , sur le forum ...

( le rapport est sauvegardé aussi sous C:\FindyKill.txt ) 
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 

Aides en images ( Installation ) 
Aides en images ( Recherche )

lili512 · Answer

heuu stp verifie le lien pr telecharger findykill psk il m'affiche serveur introuvable

lili512 · Answer

heu bon j'ai chérché dans tt le forum et ya pas un seul lien de findykill qui marche et j'ai peur de le telecharger dune autre source et d'empiré le cas de mon pc a l'aiiiiiiiide

gen-hackman · Answer

marche tres bien mon lien

lili512 · Answer

heuu non dsl il marche pas chez moi j'ai meme verifié le tuto de Chiquitine29 et on me signale que cette discussion n'existe pas

gen-hackman · Answer

Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau : 

ou :ZHPDiag

!! déconnecte toi et ferme toutes tes applications en cours !! 

* Clique droit sur le .zip que tu viens de télécharger et choisis " extraire tout " sur ton bureau ... 

* Double-clique sur "ZHPDiag.exe" pour lancer l'outil : 


> Clique sur le bouton " Tous " ( important ). 

> puis clique sur le bouton de "la loupe" pour lancer le scan . 


Laisses travailler l'outil ... 


> Une fois terminé , le rapport s'affiche : clique sur bouton "appareil photo" pour sauvegarder le rapport obtenu ... 

Enregistres bien ZHPDiag.txt de façon à le retrouver facilement ( sur le bureau par exemple ). 

Puis ferme le programme ... 


Enfin , fais un copier/coller du contenu du rapport sauvegardé dans ta prochaine réponse pour analyse ...

lili512 · Answer

bon voila jlé fait mais apres que j'ai lancé le scan ah bein ya eu une erreur "erreur d'insertion de ligne RichEdit" apres j'ai attendue j'ai attendue et il ne ma pas signalé que le scan est fini alors j'ai enregistré skil a scané et je c pas si c complet alor voila comém!:
Rapport de ZHPDiag v1.21 par Nicolas Coolman
Enregistré le 25/06/2009 13:24:16
Platform : Microsoft Windows XP (5.1.2600) Service Pack 2
MSIE: Internet Explorer v6.0.2900.2180

---\ Processus lancés
nwiz.exe
SOUNDMAN.EXE
C:\WINDOWS\system32\NeroCheck.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\spoolsv.exe

---\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

---\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

---\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: DSLMON.lnk - C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe

---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302
O9 - Extra 'Tools' menuitem: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll,101
O9 - Extra 'Tools' menuitem: Statistiques d’Anti-Virus Internet - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll,101
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll,101
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

---\ Piratage de domaine (Lop.com) (O17)
O17 - HKLM\System\CS2\Services\Tcpip\..\{DC694188-A5D0-4F8E-9C23-8F5CB995D87A}: 41.221.20.4 193.251.169.165

---\ Protocole additionnel et piratage de protocole (O18)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: WLEventStart - C:\WINDOWS\system32\klogon.dll

O20 - AppInit_DLLs:C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe

---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE
O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32egsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32	hemeui.dll
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Logiciel de navigation hors connexion - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Aide sur Internet Explorer - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)
O40 - ASIC: Outils d'installation Internet Explorer - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub
O40 - ASIC: Accès au site MSN - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Liaison de données Dynamic HTML - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: (no name) - {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - (not file)
O40 - ASIC: Polices de base Internet Explorer - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\macromed\flash\flash.ocx
O40 - ASIC: Aide HTML - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\ Pilotes lancés au démarrage (O41)
O41 - Driver: abp470n5 (abp470n5) - C:\WINDOWS\system32\drivers
osghn.sys
O41 - Driver: General Purpose USB Driver (adildr.sys) (ADILOADER) - C:\WINDOWS\System32\Drivers\adildr.sys
O41 - Driver: USB ADSL LAN Adapter (adiusbae) - C:\WINDOWS\system32\DRIVERS\adiusbae.sys
O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys
O41 - Driver: Service for Realtek AC97 Audio (WDM) (ALCXWDM) - C:\WINDOWS\system32\drivers\ALCXWDM.SYS
O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys
O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys
O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys
O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys
O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys
O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys
O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys
O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys
O41 - Driver: Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet (FETNDIS) - C:\WINDOWS\system32\DRIVERS\fetnd5.sys
O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\DRIVERS\fltMgr.sys
O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de processeur Intel (intelppm) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys
O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys
O41 - Driver: Kaspersky Anti-Virus NDIS Filter (klim5) - C:\WINDOWS\system32\DRIVERS\klim5.sys
O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys
O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys
O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys
O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys
O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys
O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS
distapi.sys
O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS
disuio.sys
O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS
diswan.sys
O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS
etbios.sys
O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS
etbt.sys
O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS
v4_mini.sys
O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERSaspptp.sys
O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys
O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys
O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERSasacd.sys
O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERSasl2tp.sys
O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERSaspppoe.sys
O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERSaspti.sys
O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERSdbss.sys
O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\system32\DRIVERSdpdr.sys
O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERSedbook.sys
O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys
O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys
O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys
O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys
O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys
O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys
O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys
O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys
O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS	cpip.sys
O41 - Driver: Filtre AGP version 3.5 Microsoft (uagp35) - C:\WINDOWS\system32\DRIVERS\uagp35.sys
O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys
O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys
O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys
O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys
O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
O41 - Driver: Pilote miniport de contrôleur hôte universel USB Microsoft (usbuhci) - C:\WINDOWS\system32\DRIVERS\usbuhci.sys
O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys
O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys

---\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65
O42 - Logiciel: Adobe Reader 9.1 - Français
O42 - Logiciel: Archiveur WinRAR
O42 - Logiciel: Huawei SmartAX MT810
O42 - Logiciel: Kaspersky Internet Security 7.0
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: Nero Suite
O42 - Logiciel: Windows Live Messenger

---\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Ahead
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Nero
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System

---\ Derniers fichiers modifiés ou crées sous System32 (O44)
O44 - LFC:Last File Created - C:\WINDOWS\System32\$winnt$.inf -->13/06/2009 - 17:17:02
O44 - LFC:Last File Created - C:\WINDOWS\System32\amcompat.tlb -->13/06/2009 - 17:14:33
O44 - LFC:Last File Created - C:\WINDOWS\System32\cdplayer.exe.manifest -->13/06/2009 - 17:13:27
O44 - LFC:Last File Created - C:\WINDOWS\System32\CONFIG.NT -->13/06/2009 - 17:14:37
O44 - LFC:Last File Created - C:\WINDOWS\System32\emptyregdb.dat -->13/06/2009 - 17:11:18
O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->13/06/2009 - 17:17:53
O44 - LFC:Last File Created - C:\WINDOWS\System32\h323log.txt -->13/06/2009 - 19:08:12
O44 - LFC:Last File Created - C:\WINDOWS\System32\logonui.exe.manifest -->13/06/2009 - 17:13:33
O44 - LFC:Last File Created - C:\WINDOWS\System32
cpa.cpl.manifest -->13/06/2009 - 17:13:27
O44 - LFC:Last File Created - C:\WINDOWS\System32
scompat.tlb -->13/06/2009 - 17:14:33
O44 - LFC:Last File Created - C:\WINDOWS\System32
vapps.xml -->25/06/2009 - 09:21:56
O44 - LFC:Last File Created - C:\WINDOWS\System32
wc.cpl.manifest -->13/06/2009 - 17:13:27
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->14/06/2009 - 13:05:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->14/06/2009 - 13:05:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->14/06/2009 - 13:05:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->14/06/2009 - 13:05:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->14/06/2009 - 13:05:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\sapi.cpl.manifest -->13/06/2009 - 17:13:27
O44 - LFC:Last File Created - C:\WINDOWS\System32\WindowsLogon.manifest -->13/06/2009 - 17:13:33
O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->16/06/2009 - 08:12:59
O44 - LFC:Last File Created - C:\WINDOWS\System32\wuaucpl.cpl.manifest -->13/06/2009 - 17:13:27
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\adidsl.cfg -->13/06/2009 - 20:00:37

---\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\7Z465.EXE-028C5F5E.pf -->24/06/2009 - 15:23:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\7ZG.EXE-04CCF0C9.pf -->24/06/2009 - 16:17:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-3A1F13AE.pf -->22/06/2009 - 13:39:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf -->22/06/2009 - 20:41:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCENTER.EXE-277BE435.pf -->24/06/2009 - 13:51:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-0426CCA6.pf -->24/06/2009 - 13:50:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGUARD.EXE-035464A8.pf -->24/06/2009 - 13:51:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-1E6D1C77.pf -->24/06/2009 - 16:11:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BOOTSTRAP.EXE-34973FC2.pf -->24/06/2009 - 18:09:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CHCP.COM-18156052.pf -->24/06/2009 - 16:30:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CLEARPROG.EXE-03053483.pf -->24/06/2009 - 17:13:02
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->24/06/2009 - 16:30:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf -->24/06/2009 - 16:30:14
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CURL.EXE-1DE0C8B5.pf -->24/06/2009 - 16:18:23
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DPINST.EXE-081DF98A.pf -->24/06/2009 - 18:10:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ECYAGR.EXE-0F4AFA88.pf -->23/06/2009 - 18:38:14
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ELIBAGLA.EXE-2653C65B.pf -->24/06/2009 - 13:48:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf -->24/06/2009 - 16:28:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf -->24/06/2009 - 16:28:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GREP.EXE-03E7A6FE.pf -->24/06/2009 - 16:30:14
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GRPCONV.EXE-111CD845.pf -->24/06/2009 - 16:12:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf -->23/06/2009 - 17:44:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->25/06/2009 - 12:09:29
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IHCOG.EXE-1E8BD7C2.pf -->23/06/2009 - 18:01:26
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->21/06/2009 - 17:17:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALL_MESSENGER.EXE-374D14C9.pf -->24/06/2009 - 18:09:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->19/06/2009 - 18:10:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LICMGR.EXE-07F9AFEC.pf -->24/06/2009 - 16:12:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf -->23/06/2009 - 17:38:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf -->24/06/2009 - 18:31:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MBR.EXE-3A88A208.pf -->24/06/2009 - 16:17:55
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MODE.COM-31685BAE.pf -->24/06/2009 - 16:30:21
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPLAYER2.EXE-179FD902.pf -->23/06/2009 - 13:37:40
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->24/06/2009 - 18:09:35
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNMSGR.EXE-366A1A81.pf -->25/06/2009 - 11:36:52
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNPP.EXE-189297DA.pf -->24/06/2009 - 17:56:14
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNPP.EXE-25C3FF3B.pf -->24/06/2009 - 17:55:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NETSH.EXE-085CFFDE.pf -->24/06/2009 - 13:16:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NIEO.EXE-16432A48.pf -->24/06/2009 - 13:59:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->25/06/2009 - 09:42:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->25/06/2009 - 09:23:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OOEML.EXE-17149EDD.pf -->24/06/2009 - 09:31:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OTGC.EXE-33377D4E.pf -->23/06/2009 - 19:20:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PCTSGUI.EXE-281B8AB7.pf -->23/06/2009 - 14:01:44
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PCTSSVC.EXE-3A239962.pf -->23/06/2009 - 14:13:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PING.EXE-31216D26.pf -->24/06/2009 - 16:18:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREM_SEC_WINNT_EN_HP.EXE-30EE9322.pf -->24/06/2009 - 13:50:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREUPD.EXE-07FF6855.pf -->24/06/2009 - 13:51:42
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf -->25/06/2009 - 09:37:42
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->24/06/2009 - 13:50:40
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf -->24/06/2009 - 16:12:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-12E27DD0.pf -->24/06/2009 - 15:28:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-21F9C845.pf -->24/06/2009 - 16:12:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-22F3CCCB.pf -->23/06/2009 - 18:17:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-30B7F78F.pf -->21/06/2009 - 17:00:32
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-34A1FC07.pf -->23/06/2009 - 19:41:37
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-369DBA8A.pf -->24/06/2009 - 16:12:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3966CDBC.pf -->24/06/2009 - 13:18:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B8F72B1.pf -->24/06/2009 - 13:40:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-42E171DC.pf -->24/06/2009 - 13:19:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->24/06/2009 - 18:09:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->24/06/2009 - 15:40:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf -->24/06/2009 - 16:12:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SCHED.EXE-2A6ED09D.pf -->24/06/2009 - 13:51:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SDUPDATE.EXE-00420EF0.pf -->24/06/2009 - 18:26:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SED.EXE-38598C26.pf -->24/06/2009 - 16:30:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-31559397.pf -->24/06/2009 - 13:50:24
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-3B1C3073.pf -->24/06/2009 - 16:12:23
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf -->24/06/2009 - 18:30:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162.EXE-23C8A87B.pf -->24/06/2009 - 18:08:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162.TMP-07D55EED.pf -->24/06/2009 - 18:03:00
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162.TMP-32263029.pf -->24/06/2009 - 18:08:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD_INCLUDES.EXE-194ABA42.pf -->24/06/2009 - 18:25:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf -->22/06/2009 - 08:13:30
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWREG.EXE-06AFBD89.pf -->24/06/2009 - 16:30:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TASKKILL.EXE-0A8306E3.pf -->24/06/2009 - 17:56:04
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf -->24/06/2009 - 18:30:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER166.EXE-0D3E95F0.pf -->24/06/2009 - 18:30:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER166.TMP-08757AB8.pf -->24/06/2009 - 18:30:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TWGO.EXE-2E259E17.pf -->24/06/2009 - 17:19:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINS000.EXE-260D7493.pf -->24/06/2009 - 18:31:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-131667C7.pf -->24/06/2009 - 18:30:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-21E50E11.pf -->24/06/2009 - 13:51:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\URGHOF.EXE-126BCC18.pf -->24/06/2009 - 15:42:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USNSVC.EXE-373E4DBC.pf -->25/06/2009 - 09:23:42
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W2DDF1A.EXE-1BE78C27.pf -->24/06/2009 - 14:01:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W3FCFF.EXE-0149D1CE.pf -->24/06/2009 - 07:32:35
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W4246C.EXE-3B8FBABF.pf -->24/06/2009 - 17:20:34
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W5DAB7.EXE-302DC9A2.pf -->24/06/2009 - 09:31:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W94CEB.EXE-1F1D3BAB.pf -->24/06/2009 - 13:20:55
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WCCT.EXE-0CA199B2.pf -->24/06/2009 - 09:34:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINCOCM.EXE-39A8321D.pf -->23/06/2009 - 19:17:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINDJAAF.EXE-0FC33698.pf -->24/06/2009 - 17:19:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINEVJGLB.EXE-13E37F93.pf -->24/06/2009 - 18:00:29
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINFVLVY.EXE-33C98FC2.pf -->24/06/2009 - 13:19:41
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINGEMB.EXE-1FF815BE.pf -->24/06/2009 - 17:23:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINGTPEM.EXE-0338BE90.pf -->24/06/2009 - 18:04:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINHJIB.EXE-0D37A688.pf -->24/06/2009 - 13:58:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINHOTBG.EXE-3A7C5318.pf -->24/06/2009 - 14:38:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINKJTROD.EXE-19A353E7.pf -->24/06/2009 - 13:23:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINKRDO.EXE-38ABD89D.pf -->23/06/2009 - 17:57:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINLDKBW.EXE-0A039D2A.pf -->24/06/2009 - 09:34:45
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf -->25/06/2009 - 09:33:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINNGLP.EXE-1FB4F79D.pf -->24/06/2009 - 13:23:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINPVTPH.EXE-1E3535CE.pf -->24/06/2009 - 17:23:29
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf -->24/06/2009 - 17:55:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRGFJDJ.EXE-071E4448.pf -->23/06/2009 - 18:41:53
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRWKW.EXE-3070B4EF.pf -->23/06/2009 - 18:01:34
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINSERBN.EXE-08216BDE.pf -->24/06/2009 - 14:03:32
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINTCQYL.EXE-22398651.pf -->24/06/2009 - 15:42:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINUHESS.EXE-310A1B36.pf -->24/06/2009 - 18:03:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINUWRA.EXE-0448C3F6.pf -->23/06/2009 - 19:17:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINUYFI.EXE-311EE058.pf -->24/06/2009 - 13:19:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINVIHST.EXE-16E44028.pf -->23/06/2009 - 19:20:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINVSUVJ.EXE-37D0A122.pf -->24/06/2009 - 14:03:35
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINVXMHD.EXE-16AA7862.pf -->23/06/2009 - 17:57:48
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWIDCV.EXE-363C3ED1.pf -->24/06/2009 - 07:32:04
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWLIET.EXE-101D18E1.pf -->23/06/2009 - 18:41:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINYQHV.EXE-2C2AE25A.pf -->24/06/2009 - 09:31:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->24/06/2009 - 17:56:00
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf -->22/06/2009 - 20:41:46
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA2.pf -->23/06/2009 - 13:37:26
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA4.pf -->22/06/2009 - 14:58:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WOFUUR.EXE-2B6ED31B.pf -->23/06/2009 - 18:37:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WOXKSO.EXE-0B1E5409.pf -->24/06/2009 - 07:31:51
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf -->13/06/2009 - 20:59:20
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSCRIPT.EXE-32960AB9.pf -->24/06/2009 - 16:28:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->25/06/2009 - 09:23:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\XXFDPM.EXE-0BE34F6D.pf -->24/06/2009 - 17:58:52
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-181B7AEE.pf -->24/06/2009 - 18:31:07

---\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

---\ Export de clé d'application autorisée (ECAA)(O47)
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "E:\manou\logiciel\wrar380fr.exe"="E:\manou\logiciel\wrar380fr.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\WINDOWS\system32
wiz.exe"="C:\WINDOWS\system32
wiz.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\Program Files\Spyware Doctor\pctsTray.exe"="C:\Program Files\Spyware Doctor\pctsTray.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe"="C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\Program Files\Avira\Avira Premium Security Suite\avwsc.exe"="C:\Program Files\Avira\Avira Premium Security Suite\avwsc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winkncomu.exe"="C:\DOCUME~1\LOCALS~1\Temp\winkncomu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winbluj.exe"="C:\DOCUME~1\LOCALS~1\Temp\winbluj.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winnkrig.exe"="C:\DOCUME~1\LOCALS~1\Temp\winnkrig.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\w4a5d1.exe"="C:\DOCUME~1\LOCALS~1\Temp\w4a5d1.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\NeroCheck.exe"="C:\WINDOWS\system32\NeroCheck.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\htma.exe"="C:\DOCUME~1\LOCALS~1\Temp\htma.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winrhipw.exe"="C:\DOCUME~1\LOCALS~1\Temp\winrhipw.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\mmrvi.exe"="C:\DOCUME~1\LOCALS~1\Temp\mmrvi.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\adnh.exe"="C:\DOCUME~1\LOCALS~1\Temp\adnh.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winbvukl.exe"="C:\DOCUME~1\LOCALS~1\Temp\winbvukl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winybuo.exe"="C:\DOCUME~1\LOCALS~1\Temp\winybuo.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp
rgmpf.exe"="C:\DOCUME~1\LOCALS~1\Temp
rgmpf.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winsmxx.exe"="C:\DOCUME~1\LOCALS~1\Temp\winsmxx.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\xaytho.exe"="C:\DOCUME~1\LOCALS~1\Temp\xaytho.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\userinit.exe"="C:\WINDOWS\system32\userinit.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\sape.exe"="C:\DOCUME~1\LOCALS~1\Temp\sape.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wingrit.exe"="C:\DOCUME~1\LOCALS~1\Temp\wingrit.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wingasp.exe"="C:\DOCUME~1\LOCALS~1\Temp\wingasp.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winpdsxgf.exe"="C:\DOCUME~1\LOCALS~1\Temp\winpdsxgf.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\wuauclt.exe"="C:\WINDOWS\system32\wuauclt.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\etjl.exe"="C:\DOCUME~1\LOCALS~1\Temp\etjl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winrdqbve.exe"="C:\DOCUME~1\LOCALS~1\Temp\winrdqbve.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\cvmr.exe"="C:\DOCUME~1\LOCALS~1\Temp\cvmr.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\veoq.exe"="C:\DOCUME~1\LOCALS~1\Temp\veoq.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\jysobi.exe"="C:\DOCUME~1\LOCALS~1\Temp\jysobi.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wincftbcb.exe"="C:\DOCUME~1\LOCALS~1\Temp\wincftbcb.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winvykt.exe"="C:\DOCUME~1\LOCALS~1\Temp\winvykt.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\vpxc.exe"="C:\DOCUME~1\LOCALS~1\Temp\vpxc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winyioig.exe"="C:\DOCUME~1\LOCALS~1\Temp\winyioig.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winmywwj.exe"="C:\DOCUME~1\LOCALS~1\Temp\winmywwj.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\icerg.exe"="C:\DOCUME~1\LOCALS~1\Temp\icerg.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp
lxh.exe"="C:\DOCUME~1\LOCALS~1\Temp
lxh.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winedem.exe"="C:\DOCUME~1\LOCALS~1\Temp\winedem.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winvkmk.exe"="C:\DOCUME~1\LOCALS~1\Temp\winvkmk.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\iscval.exe"="C:\DOCUME~1\LOCALS~1\Temp\iscval.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wintddt.exe"="C:\DOCUME~1\LOCALS~1\Temp\wintddt.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winpteoom.exe"="C:\DOCUME~1\LOCALS~1\Temp\winpteoom.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\ggvhi.exe"="C:\DOCUME~1\LOCALS~1\Temp\ggvhi.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winpdcd.exe"="C:\DOCUME~1\LOCALS~1\Temp\winpdcd.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winqvtiwo.exe"="C:\DOCUME~1\LOCALS~1\Temp\winqvtiwo.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\ybyi.exe"="C:\DOCUME~1\LOCALS~1\Temp\ybyi.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\msda.exe"="C:\DOCUME~1\LOCALS~1\Temp\msda.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winmcnu.exe"="C:\DOCUME~1\LOCALS~1\Temp\winmcnu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wingnip.exe"="C:\DOCUME~1\LOCALS~1\Temp\wingnip.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winukmvkl.exe"="C:\DOCUME~1\LOCALS~1\Temp\winukmvkl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\chwhlu.exe"="C:\DOCUME~1\LOCALS~1\Temp\chwhlu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winunfsgx.exe"="C:\DOCUME~1\LOCALS~1\Temp\winunfsgx.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winopum.exe"="C:\DOCUME~1\LOCALS~1\Temp\winopum.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winmcimos.exe"="C:\DOCUME~1\LOCALS~1\Temp\winmcimos.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winpeluhu.exe"="C:\DOCUME~1\LOCALS~1\Temp\winpeluhu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\fpssb.exe"="C:\DOCUME~1\LOCALS~1\Temp\fpssb.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winncad.exe"="C:\DOCUME~1\LOCALS~1\Temp\winncad.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winddrum.exe"="C:\DOCUME~1\LOCALS~1\Temp\winddrum.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\howd.exe"="C:\DOCUME~1\LOCALS~1\Temp\howd.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\crdd.exe"="C:\DOCUME~1\LOCALS~1\Temp\crdd.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winaodbd.exe"="C:\DOCUME~1\LOCALS~1\Temp\winaodbd.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\fcdc.exe"="C:\DOCUME~1\LOCALS~1\Temp\fcdc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\gggm.exe"="C:\DOCUME~1\LOCALS~1\Temp\gggm.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\onsywl.exe"="C:\DOCUME~1\LOCALS~1\Temp\onsywl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\allam\LOCALS~1\Temp\winfyetc.exe"="C:\DOCUME~1\LOCALS~1\Temp\winfyetc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\allam\LOCALS~1\Temp\akyig.exe"="C:\DOCUME~1\LOCALS~1\Temp\akyig.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winnvvi.exe"="C:\DOCUME~1\LOCALS~1\Temp\winnvvi.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wintshxm.exe"="C:\DOCUME~1\LOCALS~1\Temp\wintshxm.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winamiea.exe"="C:\DOCUME~1\LOCALS~1\Temp\winamiea.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\fpeb.exe"="C:\DOCUME~1\m\LOCALS~1\Temp\fpeb.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\gwsv.exe"="C:\DOCUME~1\LOCALS~1\Temp\gwsv.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wintacb.exe"="C:\DOCUME~1\LOCALS~1\Temp\wintacb.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winahkgc.exe"="C:\DOCUME~1\LOCALS~1\Temp\winahkgc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\djjlmo.exe"="C:\DOCUME~1\LOCALS~1\Temp\djjlmo.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winowur.exe"="C:\DOCUME~1\LOCALS~1\Temp\winowur.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Tempocdug.exe"="C:\DOCUME~1\LOCALS~1\Tempocdug.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winvmns.exe"="C:\DOCUME~1\LOCALS~1\Temp\winvmns.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winkcjfs.exe"="C:\DOCUME~1\LOCALS~1\Temp\winkcjfs.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winxrwuas.exe"="C:\DOCUME~1\m\LOCALS~1\Temp\winxrwuas.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\imtfuw.exe"="C:\DOCUME~1\LOCALS~1\Temp\imtfuw.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\exkppt.exe"="C:\DOCUME~1\LOCALS~1\Temp\exkppt.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wkpx.exe"="C:\DOCUME~1\LOCALS~1\Temp\wkpx.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wuclie.exe"="C:\DOCUME~1\LOCALS~1\Temp\wuclie.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\aiiev.exe"="C:\DOCUME~1\LOCALS~1\Temp\aiiev.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winbaihv.exe"="C:\DOCUME~1\LOCALS~1\Temp\winbaihv.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winvrnu.exe"="C:\DOCUME~1\m\LOCALS~1\Temp\winvrnu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\windhslm.exe"="C:\DOCUME~1\LOCALS~1\Temp\windhslm.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winmyftc.exe"="C:\DOCUME~1\LOCALS~1\Temp\winmyftc.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winmcdw.exe"="C:\DOCUME~1\LOCALS~1\Temp\winmcdw.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winvutfdy.exe"="C:\DOCUME~1\LOCALS~1\Temp\winvutfdy.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winptatod.exe"="C:\DOCUME~1\LOCALS~1\Temp\winptatod.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winlhwu.exe"="C:\DOCUME~1\LOCALS~1\Temp\winlhwu.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winhktwbe.exe"="C:\DOCUME~1\LOCALS~1\Temp\winhktwbe.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\djjl.exe"="C:\DOCUME~1\LOCALS~1\Temp\djjl.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\winivabqy.exe"="C:\DOCUME~1\LOCALS~1\Temp\winivabqy.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "C:\DOCUME~1\LOCALS~1\Temp\wingkic.exe"="C:\DOCUME~1\LOCALS~1\Temp\wingkic.exe:*:Enabled:ipsec"
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
„M

lili512 · Answer

Alors????

lili512 · Answer

ou etes vousss??????

gen-hackman · Answer

hello

alors ??? et bien j'ai l'impression qu'il va falloir se battre car apparement tu serais victime du ver Conficker

première approche :

/!\ ATTENTION SUIVRE SCRUPULEUSEMENT A LA LETTRE CES INDICATIONS/!\

_________________________________________________________________
>Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
>>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
=====================================================

On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Avant d'utiliser ComboFix :
______________________________________________________________________
>> referme les fenêtres de tous les programmes en cours.
>> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
>>la protection en temps réel de ton Antivirus et de tes Antispywares,
>>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

!!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

>> Reviens sur le forum, et

copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

lili512 · Answer

bon dsl pour le retard voila le rapport 
ComboFix 09-06-25.06 - allam 26/06/2009 15:18.1 - NTFSx86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.1023.741 [GMT 2:00]
Lancé depuis: c:\documents and settings\allam\Bureau\ComboFix.exe
 * Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Help\agt0405.hlp
c:\windows\Help\agt0408.hlp
c:\windows\Help\agt0415.hlp
c:\windows\Help\agt0419.hlp
D:\desktop.ini

.
(((((((((((((((((((((((((((((   Fichiers créés du 2009-05-26 au 2009-06-26  ))))))))))))))))))))))))))))))))))))
.

2009-06-26 13:07 . 2009-06-26 13:10	--------	d-----w-	c:\documents and settings\allam\Application Data\IDM
2009-06-26 13:07 . 2009-06-26 13:07	--------	d-----w-	c:\program files\Internet Download Manager
2009-06-24 17:25 . 2009-06-24 17:32	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2009-06-24 17:25 . 2009-06-24 17:31	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-24 14:23 . 2009-06-24 14:23	--------	d-----w-	c:\program files\7-Zip
2009-06-23 12:57 . 2009-06-23 12:57	--------	d-----r-	c:\documents and settings\LocalService\Favoris
2009-06-22 12:25 . 2009-06-22 12:25	--------	d-----w-	c:\documents and settings\allam\Local Settings\Application Data\Identities
2009-06-19 16:23 . 2009-06-19 16:24	--------	d-----w-	c:\documents and settings\allam\Application Data\Media Player Classic
2009-06-19 16:23 . 2004-01-11 22:00	348160	----a-w-	c:\windows\system32\msvcr71.dll
2009-06-19 16:23 . 2003-03-19 03:14	499712	----a-w-	c:\windows\system32\msvcp71.dll
2009-06-17 16:50 . 2004-08-03 21:08	31616	-c--a-w-	c:\windows\system32\dllcache\usbccgp.sys
2009-06-17 16:50 . 2004-08-03 21:08	31616	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2009-06-17 12:16 . 2009-06-24 17:32	--------	d-----w-	c:\program files\MSN Messenger
2009-06-16 16:20 . 2009-06-16 16:20	--------	d-----w-	c:\documents and settings\All Users\Application Data
View_Profiles
2009-06-16 13:46 . 2009-06-24 12:34	--------	d-----w-	c:\documents and settings\allam\Contacts
2009-06-16 13:45 . 2009-06-16 13:45	--------	dc----w-	c:\windows\system32\DRVSTORE
2009-06-14 12:59 . 2009-06-14 13:08	--------	d-----w-	c:\program files\Vilma
2009-06-14 12:56 . 2009-06-14 12:56	--------	d--h--w-	c:\windows\system32\GroupPolicy
2009-06-14 12:40 . 2009-06-24 16:16	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2009-06-14 12:04 . 2009-06-23 13:13	--------	d---a-w-	c:\documents and settings\All Users\Application Data\TEMP
2009-06-13 19:16 . 2009-06-13 19:16	--------	d-----w-	c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-06-13 19:12 . 2009-06-13 19:13	--------	d-----w-	c:\documents and settings\allam\Local Settings\Application Data\Adobe
2009-06-13 19:11 . 2009-06-13 19:11	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-06-13 19:07 . 2004-08-03 21:08	26496	-c--a-w-	c:\windows\system32\dllcache\usbstor.sys
2009-06-13 19:00 . 2004-02-13 11:33	192512	----a-w-	c:\windows\autoclk.exe
2009-06-13 19:00 . 2003-07-17 12:48	46167	----a-w-	c:\windows\system32\drivers\adildr.sys
2009-06-13 19:00 . 2002-08-15 14:36	135168	----a-w-	c:\windows\system32\unaddrv.exe
2009-06-13 19:00 . 2002-05-09 13:25	155648	----a-w-	c:\windows\system32\AdADIx32.dll
2009-06-13 19:00 . 2001-02-09 09:43	4981	----a-w-	c:\windows\system32\AdADIx2K.dll
2009-06-13 19:00 . 2001-02-08 10:05	46892	----a-w-	c:\windows\system32\ADADIX16.DLL
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Huawei Technologies
2009-06-13 19:00 . 2003-12-01 07:36	117785	----a-r-	c:\windows\system32\drivers\adiusbae.sys
2009-06-13 19:00 . 2001-05-24 13:24	22395	----a-w-	c:\windows\system32\drivers\fpga.bin
2009-06-13 19:00 . 2009-06-13 19:00	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Fichiers communs\InstallShield
2009-06-13 18:06 . 2001-08-17 21:59	3072	----a-w-	c:\windows\system32\drivers\audstub.sys
2009-06-13 18:05 . 2004-08-04 00:39	58496	----a-w-	c:\windows\system32\driversedbook.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	-c--a-w-	c:\windows\system32\dllcache
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	----a-w-	c:\windows\system32\drivers
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3908864	----a-w-	c:\windows\system32
v4_disp.dll
2009-06-13 18:04 . 2001-08-17 20:13	27165	----a-w-	c:\windows\system32\drivers\fetnd5.sys
2009-06-13 18:04 . 2004-08-04 00:54	77312	----a-w-	c:\windows\system32\usbui.dll
2009-06-13 18:04 . 2004-08-03 23:07	44672	----a-w-	c:\windows\system32\drivers\UAGP35.SYS
2009-06-13 18:02 . 2009-06-14 12:41	--------	d-----w-	c:\documents and settings\All Users\Bureau

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-26 13:20 . 2009-06-26 13:07	--------	d-----w-	c:\documents and settings\allam\Application Data\DMCache
2009-06-26 13:07 . 2009-06-26 13:07	165296	----a-w-	c:\documents and settings\allam\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
2009-06-23 16:45 . 2009-06-13 16:13	86331	----a-w-	c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-14 12:05 . 2002-09-07 00:00	48616	----a-w-	c:\windows\system32\perfc00C.dat
2009-06-14 12:05 . 2002-09-07 00:00	367658	----a-w-	c:\windows\system32\perfh00C.dat
2009-06-13 19:00 . 2009-06-13 19:00	26	----a-w-	c:\windows\system32\drivers\adidsl.cfg
2009-06-13 16:30 . 2009-06-13 16:30	--------	d-----w-	c:\program files\Fichiers communs\Nero
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Ahead
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Fichiers communs\Ahead
2009-06-13 16:14 . 2009-06-13 16:14	--------	d-----w-	c:\program files\microsoft frontpage
2009-06-13 16:13 . 2009-06-13 16:13	--------	d-----w-	c:\program files\Services en ligne
2009-06-13 16:11 . 2009-06-13 16:11	21892	----a-w-	c:\windows\system32\emptyregdb.dat
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5752176]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-10-28 2606512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-07-20 7110656]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-07-20 86016]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 225280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 105328]
"nwiz"="nwiz.exe" - c:\windows\system32
wiz.exe [2005-07-20 1589248]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-06-20 147456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
DSLMON.lnk - c:\program files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe [2009-6-13 929870]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[COLOR=RED] Les clés de Registre SafeBoot doivent être réparées. Cette machine ne peut pas utiliser le Mode Sans Échec. /COLOR

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"e:\manou\logiciel\wrar380fr.exe"=
"c:\WINDOWS\system32\nwiz.exe"=
"c:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe"=
"c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"=
"c:\WINDOWS\system32\NeroCheck.exe"=
"c:\WINDOWS\system32\wuauclt.exe"=
"c:\Program Files\MSN Messenger\usnsvc.exe"=
"c:\WINDOWS\SOUNDMAN.EXE"=
"c:\Program Files\MSN Messenger\msnmsgr.exe"= c:\Program Files\MSN Messenger\MsnMsgr.Exe
"c:\Program Files\MSN Messenger\livecall.exe"=

R3 abp470n5;abp470n5;\??\c:\windows\system32\drivers
osghn.sys --> c:\windows\system32\drivers
osghn.sys [?]
R3 adiusbae;USB ADSL LAN Adapter;c:\windows\system32\drivers\adiusbae.sys [13/06/2009 21:00 117785]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys --> c:\windows\system32\DRIVERS\klim5.sys [?]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-26 15:20
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-06-26 15:21
ComboFix-quarantined-files.txt  2009-06-26 13:21

Avant-CF: 34 145 513 472 octets libres
Après-CF: 34 582 441 984 octets libres

173

lili512 · Answer

Bon alors voila apres que j'ai redemarré mon pc ya plus de probleme avec les sites mais l'antivirus plante tjr !

lili512 · Answer

a l'aiiiiiiiideeeeee !!!!!!!!!

lili512 · Answer

personne pr m'aider??????

lili512 · Answer

allez j'ai besoin d'aiiiiiiiide

gen-hackman · Answer

salut désolé

Télécharge OTL de OLDTimer

et enregistre le sur ton Bureau.

Double clic sur OTL.exe pour le lancer.

Coche les 2 cases Lop et Purity

Coche la case devant scan all users

Clic sur Run Scan.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier ci-dessus.

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Tu feras la meme chose avec le "Extra.txt" s'il t'est demandé

lili512 · Answer

heu ya pas un autre site pr hébérger ces bloc notes paske celui ci :http://www.cijoint.fr/  a chaque fois il me signale qu'il ya une erreur "erreur 500 :erreur interne du serveur"??

gen-hackman · Answer

poste le ici tant pis

lili512 · Answer

OTL logfile created on: 28/06/2009 17:14:15 - Run 1
OTL by OldTimer - Version 3.0.5.3     Folder = C:\Documents and Settings\Bureau
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1023,29 Mb Total Physical Memory | 687,89 Mb Available Physical Memory | 67,22% Memory free
2,40 Gb Paging File | 2,07 Gb Available in Paging File | 85,98% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,22 Gb Total Space | 26,04 Gb Free Space | 69,97% Space Free | Partition Type: NTFS
Drive D: | 19,52 Gb Total Space | 9,19 Gb Free Space | 47,08% Space Free | Partition Type: FAT32
Drive E: | 17,76 Gb Total Space | 1,56 Gb Free Space | 8,81% Space Free | Partition Type: FAT32
Drive F: | 4,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: MAISON-FDB4413B
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========/color
 
PRC - [2008/03/07 12:00:08 | 00,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\sched.exe
PRC - [2008/03/26 15:33:51 | 00,344,321 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avfwsvc.exe
PRC - [2004/08/04 06:54:50 | 01,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2005/07/20 15:07:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32
vsvc32.exe
PRC - [2005/06/20 15:42:20 | 00,147,456 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2003/12/08 17:35:14 | 00,032,768 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
PRC - [2004/12/06 21:31:50 | 00,036,975 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
PRC - [2008/03/26 15:35:46 | 00,164,097 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avmailc.exe
PRC - [2008/10/28 13:39:11 | 02,680,240 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2003/11/17 11:01:18 | 00,929,870 | ---- | M] () -- C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe
PRC - [2008/04/09 15:57:10 | 00,254,209 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE
PRC - [2008/02/18 15:01:01 | 00,251,312 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
PRC - [2007/01/19 12:54:14 | 00,174,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\usnsvc.exe
PRC - [2007/01/19 12:55:02 | 05,752,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\msnmsgr.exe
PRC - [2004/08/04 06:54:52 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
PRC - [2004/08/04 06:54:52 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
PRC - [2004/08/04 06:54:52 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
PRC - [2009/06/28 17:12:24 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\allam\Bureau\OTL.exe
 
[color=#E56717]========== Win32 Services (SafeList) ==========/color
 
SRV - [2008/03/26 15:33:51 | 00,344,321 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avfwsvc.exe -- (AntiVirFirewallService [Auto | Running])
SRV - [2008/03/26 15:35:46 | 00,164,097 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avmailc.exe -- (AntiVirMailService [Auto | Running])
SRV - [2008/03/07 12:00:08 | 00,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\sched.exe -- (AntiVirScheduler [Auto | Running])
SRV - [2008/03/26 15:34:49 | 00,147,201 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avguard.exe -- (AntiVirService [Auto | Stopped])
SRV - [2008/04/09 15:57:10 | 00,254,209 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE -- (antivirwebservice [Auto | Running])
SRV - [2008/02/07 10:06:05 | 00,041,217 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avesvc.exe -- (AVEService [Auto | Stopped])
SRV - [2004/08/04 06:54:36 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2005/07/20 15:07:00 | 00,127,043 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32
vsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2003/07/28 20:28:22 | 00,158,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2007/01/19 12:54:14 | 00,174,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Running])
 
[color=#E56717]========== Driver Services (SafeList) ==========/color
 
DRV - File not found --  -- (abp470n5 [On_Demand | Running])
DRV - [2003/02/21 19:52:04 | 00,049,143 | ---- | M] (Analog Deivces) -- C:\WINDOWS\System32\Drivers\adildr.sys -- (ADILOADER [Auto | Stopped])
DRV - [2003/12/01 09:36:04 | 00,117,785 | R--- | M] (Analog Devices Inc.) -- C:\WINDOWS\System32\DRIVERS\adiusbae.sys -- (adiusbae [On_Demand | Running])
DRV - [2005/06/20 16:08:44 | 02,324,480 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])
DRV - [2008/03/06 12:15:15 | 00,071,464 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\avfwim.sys -- (avfwim [On_Demand | Running])
DRV - [2008/02/07 10:00:37 | 00,066,176 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\avfwot.sys -- (avfwot [System | Running])
DRV - [2007/02/27 15:25:01 | 00,011,840 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avgio.sys -- (avgio [System | Running])
DRV - [2008/02/18 17:07:57 | 00,049,472 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avgntflt.sys -- (avgntflt [On_Demand | Running])
DRV - [2008/03/04 13:28:53 | 00,079,424 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\avipbb.sys -- (avipbb [System | Running])
DRV - [2001/08/17 22:13:08 | 00,027,165 | ---- | M] (VIA Technologies, Inc.              ) -- C:\WINDOWS\System32\DRIVERS\fetnd5.sys -- (FETNDIS [On_Demand | Running])
DRV - [2005/07/20 15:07:00 | 03,198,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS
v4_mini.sys -- (nv [On_Demand | Running])
DRV - [2002/09/07 02:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2004/07/17 17:36:38 | 00,027,440 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2007/03/01 10:34:22 | 00,028,352 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\DRIVERS\ssmdrv.sys -- (ssmdrv [System | Running])
 
[color=#E56717]========== Standard Registry (SafeList) ==========/color
 
 
[color=#E56717]========== Internet Explorer ==========/color
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
IE - HKU\S-1-5-21-1123561945-616249376-725345543-1003\S-1-5-21-1123561945-616249376-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: (790 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\Avira Premium Security Suite\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32
wiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\S-1-5-21-1123561945-616249376-725345543-1003..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-1123561945-616249376-725345543-1003..\Run: [MsnMsgr] C:\Program Files\MSN Messenger\MsnMsgr.Exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk = C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1123561945-616249376-725345543-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
pjpi150_01.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\System32svpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\System32svpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 -  File not found
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_01-windows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_01-windows-i586.cab (Java Plug-in 1.5.0_01)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter:  - text/xml - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/13 18:14:37 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/01/08 13:15:44 | 00,000,000 | RHSD | M] - D:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2009/01/08 13:15:44 | 00,000,000 | RHSD | M] - E:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{09617026-5efc-11de-9fec-007304444b2a}\Shell\autoplAy\ComMand - "" = tyqsbw.pif
O33 - MountPoints2\{09617026-5efc-11de-9fec-007304444b2a}\Shell\AutoRun\command - "" = tyqsbw.pif
O33 - MountPoints2\{09617026-5efc-11de-9fec-007304444b2a}\Shell\exploRE\CoMManD - "" = tyqsbw.pif
O33 - MountPoints2\{09617026-5efc-11de-9fec-007304444b2a}\Shell\oPen\CommaNd - "" = tyqsbw.pif
O33 - MountPoints2\{15844da4-5bed-11de-9fdc-007304444b2a}\Shell\AUToPlAY\coMMaND - "" = H:jhb.pif -- File not found
O33 - MountPoints2\{15844da4-5bed-11de-9fdc-007304444b2a}\Shell\AutoRun\command - "" = H:jhb.pif -- File not found
O33 - MountPoints2\{15844da4-5bed-11de-9fdc-007304444b2a}\Shell\ExPlOrE\cOmmand - "" = H:jhb.pif -- File not found
O33 - MountPoints2\{15844da4-5bed-11de-9fdc-007304444b2a}\Shell\open\comMAnd - "" = H:jhb.pif -- File not found
O33 - MountPoints2\{343b69be-60b9-11de-9ff6-007304444b2a}\Shell\AuTOplaY\command - "" = H:\ynjo.pif -- File not found
O33 - MountPoints2\{343b69be-60b9-11de-9ff6-007304444b2a}\Shell\AutoRun\command - "" = H:\ynjo.pif -- File not found
O33 - MountPoints2\{343b69be-60b9-11de-9ff6-007304444b2a}\Shell\exPloRE\COmmanD - "" = H:\ynjo.pif -- File not found
O33 - MountPoints2\{343b69be-60b9-11de-9ff6-007304444b2a}\Shell\OpEn\CommanD - "" = H:\ynjo.pif -- File not found
O33 - MountPoints2\{e9592995-5b5a-11de-9fda-007304444b2a}\Shell\AuTOplAy\cOmmand - "" = H:\sgelnn.exe -- File not found
O33 - MountPoints2\{e9592995-5b5a-11de-9fda-007304444b2a}\Shell\AutoRun\command - "" = H:\sgelnn.exe -- File not found
O33 - MountPoints2\{e9592995-5b5a-11de-9fda-007304444b2a}\Shell\EXplore\CommaNd - "" = H:\sgelnn.exe -- File not found
O33 - MountPoints2\{e9592995-5b5a-11de-9fda-007304444b2a}\Shell\open\comMand - "" = H:\sgelnn.exe -- File not found
O33 - MountPoints2\{e9592996-5b5a-11de-9fda-007304444b2a}\Shell\AutOplAY\coMMAND - "" = I:
tqmm.pif -- File not found
O33 - MountPoints2\{e9592996-5b5a-11de-9fda-007304444b2a}\Shell\AutoRun\command - "" = I:
tqmm.pif -- File not found
O33 - MountPoints2\{e9592996-5b5a-11de-9fda-007304444b2a}\Shell\ExPlOrE\CommaNd - "" = I:
tqmm.pif -- File not found
O33 - MountPoints2\{e9592996-5b5a-11de-9fda-007304444b2a}\Shell\open\command - "" = I:
tqmm.pif -- File not found
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color
 
[1 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009/06/28 17:13:10 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\allam\Bureau\OTL.exe
[2009/06/28 15:36:27 | 23,635,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009/06/28 14:12:06 | 00,071,464 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwim.sys
[2009/06/28 14:12:06 | 00,066,176 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwot.sys
[2009/06/28 14:12:06 | 00,041,792 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2009/06/28 14:12:06 | 00,022,336 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2009/06/28 14:12:05 | 00,028,352 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2009/06/28 14:12:04 | 00,094,465 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\avsda.dll
[2009/06/28 14:12:04 | 00,079,424 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2009/06/28 14:12:03 | 00,000,000 | ---D | C] -- C:\Program Files\Avira
[2009/06/28 08:09:48 | 00,196,608 | ---- | C] () -- C:\WINDOWS\autoclk.exe
[2009/06/28 08:09:48 | 00,000,767 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk
[2009/06/28 08:09:46 | 00,261,966 | ---- | C] () -- C:\WINDOWS\System32\driverstbldep3.bnm
[2009/06/28 08:09:46 | 00,261,952 | ---- | C] () -- C:\WINDOWS\System32\driverstbld3.bnm
[2009/06/28 08:09:46 | 00,261,932 | ---- | C] () -- C:\WINDOWS\System32\driverstbld0.bnm
[2009/06/28 08:09:46 | 00,261,920 | ---- | C] () -- C:\WINDOWS\System32\driverstbld2.bnm
[2009/06/28 08:09:46 | 00,261,908 | ---- | C] () -- C:\WINDOWS\System32\driverstbldep2.bnm
[2009/06/28 08:09:46 | 00,261,894 | ---- | C] () -- C:\WINDOWS\System32\driverstbld1.bnm
[2009/06/28 08:09:46 | 00,155,648 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\AdADIx32.dll
[2009/06/28 08:09:46 | 00,135,168 | ---- | C] (Analog Devices.) -- C:\WINDOWS\System32\unaddrv.exe
[2009/06/28 08:09:46 | 00,069,310 | ---- | C] () -- C:\WINDOWS\System32\driverstbldep4.bnm
[2009/06/28 08:09:46 | 00,055,228 | ---- | C] () -- C:\WINDOWS\System32\driverstbld4.bnm
[2009/06/28 08:09:46 | 00,049,143 | ---- | C] (Analog Deivces) -- C:\WINDOWS\System32\drivers\adildr.sys
[2009/06/28 08:09:46 | 00,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL
[2009/06/28 08:09:46 | 00,004,981 | ---- | C] (SITECSOFT Co., LTD.) -- C:\WINDOWS\System32\AdADIx2K.dll
[2009/06/28 08:09:46 | 00,000,026 | ---- | C] () -- C:\WINDOWS\System32\drivers\adidsl.cfg
[2009/06/28 08:09:45 | 00,261,964 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9i1.bnm
[2009/06/28 08:09:45 | 00,261,962 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9p3.bnm
[2009/06/28 08:09:45 | 00,261,958 | ---- | C] () -- C:\WINDOWS\System32\driverstbldep1.bnm
[2009/06/28 08:09:45 | 00,261,954 | ---- | C] () -- C:\WINDOWS\System32\driverstbldei0.bnm
[2009/06/28 08:09:45 | 00,261,952 | ---- | C] () -- C:\WINDOWS\System32\driverstbldei3.bnm
[2009/06/28 08:09:45 | 00,261,952 | ---- | C] () -- C:\WINDOWS\System32\driverstbldei2.bnm
[2009/06/28 08:09:45 | 00,261,952 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9p1.bnm
[2009/06/28 08:09:45 | 00,261,948 | ---- | C] () -- C:\WINDOWS\System32\driverstbldep0.bnm
[2009/06/28 08:09:45 | 00,261,938 | ---- | C] () -- C:\WINDOWS\System32\driverstbldei1.bnm
[2009/06/28 08:09:45 | 00,261,930 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9p0.bnm
[2009/06/28 08:09:45 | 00,261,926 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9p2.bnm
[2009/06/28 08:09:45 | 00,261,920 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9i3.bnm
[2009/06/28 08:09:45 | 00,261,918 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9i2.bnm
[2009/06/28 08:09:45 | 00,067,258 | ---- | C] () -- C:\WINDOWS\System32\driverstbldei4.bnm
[2009/06/28 08:09:45 | 00,053,590 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9i4.bnm
[2009/06/28 08:09:45 | 00,041,620 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9p4.bnm
[2009/06/28 08:09:44 | 00,261,960 | ---- | C] () -- C:\WINDOWS\System32\driverstbld9i0.bnm
[2009/06/28 08:09:44 | 00,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin
[2009/06/27 19:26:48 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2009/06/27 15:33:18 | 00,000,000 | ---D | C] -- C:\Program Files\Java
[2009/06/27 15:33:17 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Java
[2009/06/27 15:33:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150010}
[2009/06/27 14:27:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Bureau\VIDEO_TS
[2009/06/27 14:27:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Bureau\AUDIO_TS
[2009/06/27 13:30:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\CyberLink
[2009/06/27 13:30:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mes documents\CyberLink
[2009/06/27 13:26:48 | 00,001,684 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\PowerDVD.lnk
[2009/06/27 13:26:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\CyberLink
[2009/06/27 13:26:40 | 00,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2009/06/27 11:23:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Local Settings\Application Data\Ahead
[2009/06/26 17:52:59 | 00,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/06/26 17:52:55 | 00,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll
[2009/06/26 17:52:23 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2009/06/26 17:52:01 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\DESIGNER
[2009/06/26 17:51:46 | 00,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2009/06/26 17:51:43 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2009/06/26 17:48:36 | 00,000,000 | RH-D | C] -- C:\MSOCache
[2009/06/26 16:37:21 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009/06/26 15:21:57 | 00,000,000 | ---D | C] -- C:\WINDOWS	emp
[2009/06/26 15:21:11 | 01,548,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\sfcfiles.dll
[2009/06/26 15:21:11 | 01,048,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\kernel32.dll
[2009/06/26 15:21:11 | 00,297,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache	ermsrv.dll
[2009/06/26 15:21:11 | 00,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\appmgmts.dll
[2009/06/26 15:21:11 | 00,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\wuauclt.exe
[2009/06/26 15:21:11 | 00,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\imm32.dll
[2009/06/26 15:21:11 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\spoolsv.exe
[2009/06/26 15:21:11 | 00,025,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\kbdclass.sys
[2009/06/26 15:21:11 | 00,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\userinit.exe
[2009/06/26 15:21:11 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\powrprof.dll
[2009/06/26 15:21:11 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ctfmon.exe
[2009/06/26 15:21:11 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\lsass.exe
[2009/06/26 15:21:09 | 02,150,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache
toskrnl.exe
[2009/06/26 15:21:09 | 02,017,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache
tkrnlpa.exe
[2009/06/26 15:21:09 | 01,036,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\explorer.exe
[2009/06/26 15:21:09 | 00,660,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\wininet.dll
[2009/06/26 15:21:09 | 00,578,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\user32.dll
[2009/06/26 15:21:09 | 00,506,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\winlogon.exe
[2009/06/26 15:21:09 | 00,359,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache	cpip.sys
[2009/06/26 15:21:09 | 00,182,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache
dis.sys
[2009/06/26 15:21:09 | 00,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\services.exe
[2009/06/26 15:21:09 | 00,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ws2_32.dll
[2009/06/26 15:21:09 | 00,029,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\ip6fw.sys
[2009/06/26 15:21:09 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cache\svchost.exe
[2009/06/26 15:21:09 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dllcache\cache
[2009/06/26 15:18:23 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2009/06/26 15:18:23 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2009/06/26 15:18:23 | 00,155,136 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009/06/26 15:18:23 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2009/06/26 15:18:23 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2009/06/26 15:18:23 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2009/06/26 15:18:23 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009/06/26 15:18:23 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2009/06/26 15:18:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/06/26 15:18:18 | 00,000,000 | --SD | C] -- C:\ComboFix
[2009/06/26 15:18:16 | 00,000,000 | ---D | C] -- C:\Qoobox
[2009/06/26 15:07:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mes documents\Downloads
[2009/06/26 15:07:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\IDM
[2009/06/26 15:07:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\DMCache
[2009/06/26 15:07:18 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2009/06/25 17:22:33 | 00,002,237 | ---- | C] () -- C:\Documents and Settings\allam\Bureau\Windows Live Messenger.lnk
[2009/06/24 19:25:03 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/06/24 19:25:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/06/24 16:23:33 | 00,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2009/06/24 15:37:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Bureau\alger-240609
[2009/06/22 14:25:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Local Settings\Application Data\Identities
[2009/06/21 20:59:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\Macromedia
[2009/06/21 20:10:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Bureau\mehdi
[2009/06/19 18:23:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\Media Player Classic
[2009/06/19 18:23:12 | 00,499,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp71.dll
[2009/06/19 18:23:12 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr71.dll
[2009/06/17 18:50:11 | 00,031,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbccgp.sys
[2009/06/17 18:50:11 | 00,031,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys
[2009/06/17 14:16:42 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Messenger
[2009/06/17 12:59:36 | 00,000,790 | ---- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.msn
[2009/06/16 18:20:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data
View_Profiles
[2009/06/16 17:01:02 | 00,000,104 | ---- | C] () -- C:\Documents and Settings\Bureau\Internet.lnk
[2009/06/16 16:21:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2009/06/16 15:47:45 | 00,000,565 | ---- | C] () -- C:\Documents and Settings\Mes documents\Mes dossiers de partage.lnk
[2009/06/16 15:45:48 | 00,000,268 | -H-- | C] () -- C:\sqmdata00.sqm
[2009/06/16 15:45:48 | 00,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2009/06/16 15:45:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Mes documents\Mes fichiers reçus
[2009/06/16 15:45:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009/06/14 14:59:11 | 00,000,000 | ---D | C] -- C:\Program Files\Vilma
[2009/06/14 14:56:31 | 00,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2009/06/14 14:40:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2009/06/14 14:33:51 | 00,000,000 | -HSD | C] -- C:\Config.Msi
[2009/06/14 14:04:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/06/13 21:16:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
[2009/06/13 21:12:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Local Settings\Application Data\Adobe
[2009/06/13 21:12:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\Adobe
[2009/06/13 21:11:58 | 00,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk
[2009/06/13 21:11:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/06/13 21:11:45 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Adobe
[2009/06/13 21:11:45 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2009/06/13 21:10:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Application Data\WinRAR
[2009/06/13 21:10:25 | 00,000,534 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\fawri.lnk
[2009/06/13 21:09:09 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009/06/13 21:07:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Bureau\KasperSky 2007.0.0.124  fr
[2009/06/13 21:07:11 | 00,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS
[2009/06/13 21:07:11 | 00,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys
[2009/06/13 21:00:37 | 00,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2009/06/13 21:00:27 | 00,117,785 | R--- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\drivers\adiusbae.sys
[2009/06/13 21:00:27 | 00,000,000 | ---D | C] -- C:\Program Files\Huawei Technologies
[2009/06/13 21:00:26 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/06/13 21:00:16 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\InstallShield
[2009/06/13 20:06:34 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\audstub.sys
[2009/06/13 20:05:31 | 00,058,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\driversedbook.sys
[2009/06/13 20:04:44 | 00,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2009/06/13 20:04:38 | 00,044,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\UAGP35.SYS
[2009/06/13 20:03:26 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2009/06/13 20:03:26 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\ODBC
[2009/06/13 20:03:24 | 01,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2009/06/13 20:03:24 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll
[2009/06/13 20:03:24 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll
[2009/06/13 20:03:23 | 00,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll
[2009/06/13 20:03:23 | 00,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009/06/13 20:03:23 | 00,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache1033tts.lxa
[2009/06/13 20:03:23 | 00,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.cpl
[2009/06/13 20:03:23 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe
[2009/06/13 20:03:23 | 00,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2009/06/13 20:03:23 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\SpeechEngines
[2009/06/13 20:03:22 | 00,741,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.dll
[2009/06/13 20:03:22 | 00,000,000 | R--D | C] -- C:\Program Files
[2009/06/13 20:03:22 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Microsoft Shared
[2009/06/13 20:03:22 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs
[2009/06/13 20:03:20 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2009/06/13 20:03:20 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2009/06/13 20:03:20 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt041f.dll
[2009/06/13 20:03:19 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2009/06/13 20:03:19 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2009/06/13 20:03:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2009/06/13 20:03:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2009/06/13 20:03:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2009/06/13 20:03:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2009/06/13 20:03:19 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0419.dll
[2009/06/13 20:03:19 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2009/06/13 20:03:19 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2009/06/13 20:03:19 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009/06/13 20:03:19 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009/06/13 20:03:19 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2009/06/13 20:03:19 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2009/06/13 20:03:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2009/06/13 20:03:17 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0408.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2009/06/13 20:03:17 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll
[2009/06/13 20:03:17 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll
[2009/06/13 20:03:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2009/06/13 20:03:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2009/06/13 20:03:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2009/06/13 20:03:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2009/06/13 20:03:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2009/06/13 20:03:15 | 00,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2009/06/13 20:03:15 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll
[2009/06/13 20:03:15 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2009/06/13 20:03:15 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009/06/13 20:03:15 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2009/06/13 20:03:15 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2009/06/13 20:03:15 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009/06/13 20:03:15 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009/06/13 20:03:15 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2009/06/13 20:03:15 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2009/06/13 20:03:15 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2009/06/13 20:03:15 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009/06/13 20:03:15 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009/06/13 20:03:15 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll
[2009/06/13 20:03:14 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2009/06/13 20:03:14 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2009/06/13 20:03:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2009/06/13 20:03:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2009/06/13 20:03:14 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2009/06/13 20:03:14 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2009/06/13 20:03:14 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2009/06/13 20:03:14 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009/06/13 20:03:14 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll
[2009/06/13 20:03:14 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll
[2009/06/13 20:03:14 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2009/06/13 20:03:14 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2009/06/13 20:03:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009/06/13 20:03:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll
[2009/06/13 20:03:13 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2009/06/13 20:03:13 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2009/06/13 20:03:13 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040e.dll
[2009/06/13 20:03:13 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0415.dll
[2009/06/13 20:03:13 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0405.dll
[2009/06/13 20:03:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2009/06/13 20:03:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2009/06/13 20:03:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2009/06/13 20:03:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2009/06/13 20:03:12 | 00,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2009/06/13 20:03:12 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2009/06/13 20:03:12 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll
[2009/06/13 20:03:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll
[2009/06/13 20:03:12 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2009/06/13 20:03:12 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2009/06/13 20:03:12 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2009/06/13 20:03:12 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll
[2009/06/13 20:03:12 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2009/06/13 20:03:12 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009/06/13 20:03:11 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2009/06/13 20:03:11 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2009/06/13 20:03:11 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2009/06/13 20:03:11 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2009/06/13 20:03:10 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2009/06/13 20:03:10 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2009/06/13 20:03:09 | 00,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2009/06/13 20:03:09 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2009/06/13 20:03:09 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2009/06/13 20:03:09 | 00,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2009/06/13 20:03:08 | 00,127,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2009/06/13 20:03:08 | 00,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2009/06/13 20:03:08 | 00,073,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2009/06/13 20:03:08 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2009/06/13 20:03:08 | 00,025,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2009/06/13 20:03:08 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2009/06/13 20:03:08 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2009/06/13 20:03:08 | 00,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2009/06/13 20:03:08 | 00,009,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2009/06/13 20:03:08 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2009/06/13 20:03:08 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2009/06/13 20:03:08 | 00,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2009/06/13 20:03:08 | 00,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2009/06/13 20:03:08 | 00,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2009/06/13 20:03:08 | 00,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2009/06/13 20:03:08 | 00,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2009/06/13 20:03:07 | 00,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2009/06/13 20:03:07 | 00,070,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2009/06/13 20:03:07 | 00,033,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2009/06/13 20:03:07 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2009/06/13 20:03:07 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache	askman.exe
[2009/06/13 20:03:07 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irenum.sys
[2009/06/13 20:03:07 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irenum.sys
[2009/06/13 20:03:07 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\batt.dll
[2009/06/13 20:03:07 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2009/06/13 20:03:07 | 00,001,896 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2009/06/13 20:03:06 | 00,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV
[2009/06/13 20:03:06 | 00,070,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2009/06/13 20:03:06 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\NOTEPAD.EXE
[2009/06/13 20:03:05 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2009/06/13 20:02:56 | 00,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009/06/13 20:02:56 | 00,141,702 | ---- | C] () -- C:\WINDOWS\System32\dllcache
etfx.cat
[2009/06/13 20:02:56 | 00,103,124 | ---- | C] () -- C:\WINDOWS\System32\dllcache	abletpc.cat
[2009/06/13 20:02:56 | 00,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2009/06/13 20:02:56 | 00,031,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2009/06/13 20:02:56 | 00,030,983 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2009/06/13 20:02:56 | 00,019,569 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat
[2009/06/13 20:02:56 | 00,014,043 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2009/06/13 20:02:56 | 00,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009/06/13 20:02:56 | 00,011,651 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat
[2009/06/13 20:02:56 | 00,009,581 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2009/06/13 20:02:56 | 00,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009/06/13 20:02:56 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009/06/13 20:02:56 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009/06/13 20:02:56 | 00,007,245 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2009/06/13 20:02:55 | 01,897,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2009/06/13 20:02:55 | 01,086,058 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NTPRINT.CAT
[2009/06/13 20:02:55 | 01,014,836 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2009/06/13 20:02:55 | 00,809,394 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009/06/13 20:02:55 | 00,623,110 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2009/06/13 20:02:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2009/06/13 20:02:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2009/06/13 20:02:39 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/06/13 20:02:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings
[2009/06/13 20:02:20 | 00,188,200 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/06/13 20:00:41 | 00,000,212 | -HS- | C] () -- C:\boot.ini
[2009/06/13 20:00:38 | 00,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2009/06/13 19:59:30 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009/06/13 19:55:36 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2009/06/13 19:55:36 | 00,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2009/06/13 19:55:36 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web
[2009/06/13 19:55:36 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS	wain_32
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32as
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32
pp
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2009/06/13 19:55:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System

gen-hackman · Answer

bon je t'avertis d'entrée , ce n'est pas sur qu'on s'en sorte rapidement et ce n'est pas sur qu'on s'en sorte tout court

ton pc est une vraie infection à lui tout seul il va falloir de la patience et de la perseverence....ca va etre très difficile

pour te dire vrai je n'ai jamais vu telle infection

######## | XP _ Instal & recherche | #######


Telecharge et install UsbFix (de C_XX & Chiquitine29)

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d avoir été infectés sans les ouvrir

# Double clic sur le raccourci UsbFix présent sur ton bureau .

# Choisi l option 1 ( Recherche )

# Laisse travailler l outil.

# Ensuite post le rapport UsbFix.txt qui apparaitra.

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

# Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

lili512 · Answer

et voila l'extras: OTL Extras logfile created on: 28/06/2009 17:14:15 - Run 1 OTL by OldTimer - Version 3.0.5.3 Folder = C:\Documents and Settings\allam\Bureau Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 1023,29 Mb Total Physical Memory | 687,89 Mb Available Physical Memory | 67,22% Memory free 2,40 Gb Paging File | 2,07 Gb Available in Paging File | 85,98% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,22 Gb Total Space | 26,04 Gb Free Space | 69,97% Space Free | Partition Type: NTFS Drive D: | 19,52 Gb Total Space | 9,19 Gb Free Space | 47,08% Space Free | Partition Type: FAT32 Drive E: | 17,76 Gb Total Space | 1,56 Gb Free Space | 8,81% Space Free | Partition Type: FAT32 Drive F: | 4,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MAISON-FDB4413B Current User Name: allam Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========/color [color=#E56717]========== File Associations ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 1 "AntiVirusOverride" = 1 "FirewallOverride" = 1 "UacDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 "UacDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [color=#E56717]========== Authorized Applications List ==========/color [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [2007/01/19 12:55:02 | 05,752,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 [2007/01/04 16:10:02 | 00,367,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [2009/03/20 16:36:40 | 01,369,607 | ---- | M] () -- E:\manou\logiciel\wrar380fr.exe:*:Enabled:ipsec [2005/07/20 15:07:00 | 01,589,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32 wiz.exe:*:Enabled:ipsec [2003/11/17 11:01:18 | 00,929,870 | ---- | M] () -- C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe:*:Enabled:ipsec [2009/02/27 17:10:28 | 00,105,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe:*:Enabled:ipsec [2001/07/09 11:50:42 | 00,225,280 | ---- | M] (Ahead Software Gmbh) -- C:\WINDOWS\system32\NeroCheck.exe:*:Enabled:ipsec [2007/01/19 12:54:14 | 00,174,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\usnsvc.exe:*:Enabled:ipsec [2005/06/20 15:42:20 | 00,147,456 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE:*:Enabled:ipsec [2007/01/19 12:55:02 | 05,752,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\MsnMsgr.Exe:*:Enabled:ipsec [2007/01/04 16:10:02 | 00,367,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbpgmot.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\mxymp.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp xuqw.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winysau.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\xdrpau.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\ujon.exe:*:Enabled:ipsec [2008/10/28 13:39:11 | 02,680,240 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winlskg.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winvfrwn.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbrui.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winwpok.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w4b0ed.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winoykoxd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winjnrxkn.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winqlnw.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winrogrls.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbrekcd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\windllwad.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\mqlt.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\efxx.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winofbd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winlplrvr.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winghqnf.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\xmfio.exe:*:Enabled:ipsec [2008/04/08 18:32:50 | 00,208,592 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avwsc.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winrwka.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\leaq.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winwknqcs.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\wingdgela.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w9c816.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\odct.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\uuika.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w649ec.exe:*:Enabled:ipsec [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{3248F0A8-6813-11D6-A77B-00B0D0150010}" = J2SE Runtime Environment 5.0 Update 1 "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = Huawei SmartAX MT810 "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1 - Français "{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}" = Windows Live Messenger "7-Zip" = 7-Zip 4.65 "Internet Download Manager" = Internet Download Manager "NeroMultiInstaller!UninstallKey" = Nero Suite "NVIDIA Drivers" = NVIDIA Drivers "Premium Security Suite" = Avira Premium Security Suite "WinRAR archiver" = Archiveur WinRAR [color=#E56717]========== Last 10 Event Log Errors ==========/color [ Application Events ] Error - 14/06/2009 09:05:06 | Computer Name = MAISON-FDB4413B | Source = Application Error | ID = 1000 Description = Application défaillante explorer.exe, version 6.0.2900.2180, module défaillant , version 0.0.0.0, adresse de défaillance 0x00000000. Error - 18/06/2009 05:18:23 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BF à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 24/06/2009 04:24:55 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 27/06/2009 09:44:32 | Computer Name = MAISON-FDB4413B | Source = Application Error | ID = 1000 Description = Application défaillante idman.exe, version 5.15.1.0, module défaillant ntdll.dll, version 5.1.2600.2180, adresse de défaillance 0x00010e03. Error - 27/06/2009 15:43:57 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 27/06/2009 15:52:40 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu [ System Events ] Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite Guard n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite MailGuard helper service. Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite MailGuard helper service n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7001 Description = Le service Avira Premium Security Suite MailGuard dépend du service Avira Premium Security Suite MailGuard helper service qui n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7001 Description = Le service Avira Premium Security Suite WebGuard dépend du service Avira Premium Security Suite MailGuard helper service qui n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:56 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7031 Description = Le service Appel de procédure distante (RPC) s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer l'ordinateur. Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service General Purpose USB Driver (adildr.sys) n'a pas pu démarrer en raison de l'erreur : %%1058 Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite Guard. Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite Guard n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite MailGuard helper service. < End of report >

lili512 · Answer

et voila l'extras: OTL Extras logfile created on: 28/06/2009 17:14:15 - Run 1 OTL by OldTimer - Version 3.0.5.3 Folder = C:\Documents and Settings\Bureau Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 1023,29 Mb Total Physical Memory | 687,89 Mb Available Physical Memory | 67,22% Memory free 2,40 Gb Paging File | 2,07 Gb Available in Paging File | 85,98% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,22 Gb Total Space | 26,04 Gb Free Space | 69,97% Space Free | Partition Type: NTFS Drive D: | 19,52 Gb Total Space | 9,19 Gb Free Space | 47,08% Space Free | Partition Type: FAT32 Drive E: | 17,76 Gb Total Space | 1,56 Gb Free Space | 8,81% Space Free | Partition Type: FAT32 Drive F: | 4,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MAISON-FDB4413B Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "UpdatesDisableNotify" = 1 "AntiVirusOverride" = 1 "FirewallOverride" = 1 "UacDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 "UacDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [2007/01/19 12:55:02 | 05,752,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 [2007/01/04 16:10:02 | 00,367,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [2009/03/20 16:36:40 | 01,369,607 | ---- | M] () -- E:\manou\logiciel\wrar380fr.exe:*:Enabled:ipsec [2005/07/20 15:07:00 | 01,589,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32 wiz.exe:*:Enabled:ipsec [2003/11/17 11:01:18 | 00,929,870 | ---- | M] () -- C:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe:*:Enabled:ipsec [2009/02/27 17:10:28 | 00,105,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe:*:Enabled:ipsec [2001/07/09 11:50:42 | 00,225,280 | ---- | M] (Ahead Software Gmbh) -- C:\WINDOWS\system32\NeroCheck.exe:*:Enabled:ipsec [2007/01/19 12:54:14 | 00,174,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\usnsvc.exe:*:Enabled:ipsec [2005/06/20 15:42:20 | 00,147,456 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE:*:Enabled:ipsec [2007/01/19 12:55:02 | 05,752,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\MsnMsgr.Exe:*:Enabled:ipsec [2007/01/04 16:10:02 | 00,367,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbpgmot.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\mxymp.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp xuqw.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winysau.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\xdrpau.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\ujon.exe:*:Enabled:ipsec [2008/10/28 13:39:11 | 02,680,240 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winlskg.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winvfrwn.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbrui.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winwpok.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w4b0ed.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winoykoxd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winjnrxkn.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winqlnw.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winrogrls.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winbrekcd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\windllwad.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\mqlt.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\efxx.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winofbd.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winlplrvr.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winghqnf.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\xmfio.exe:*:Enabled:ipsec [2008/04/08 18:32:50 | 00,208,592 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\Avira Premium Security Suite\avwsc.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winrwka.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\leaq.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\winwknqcs.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\wingdgela.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w9c816.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\odct.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\uuika.exe:*:Enabled:ipsec File not found -- C:\DOCUME~1\LOCALS~1\Temp\w649ec.exe:*:Enabled:ipsec [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{3248F0A8-6813-11D6-A77B-00B0D0150010}" = J2SE Runtime Environment 5.0 Update 1 "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = Huawei SmartAX MT810 "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{9011040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1 - Français "{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}" = Windows Live Messenger "7-Zip" = 7-Zip 4.65 "Internet Download Manager" = Internet Download Manager "NeroMultiInstaller!UninstallKey" = Nero Suite "NVIDIA Drivers" = NVIDIA Drivers "Premium Security Suite" = Avira Premium Security Suite "WinRAR archiver" = Archiveur WinRAR [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 14/06/2009 09:05:06 | Computer Name = MAISON-FDB4413B | Source = Application Error | ID = 1000 Description = Application défaillante explorer.exe, version 6.0.2900.2180, module défaillant , version 0.0.0.0, adresse de défaillance 0x00000000. Error - 18/06/2009 05:18:23 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BF à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 24/06/2009 04:24:55 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 27/06/2009 09:44:32 | Computer Name = MAISON-FDB4413B | Source = Application Error | ID = 1000 Description = Application défaillante idman.exe, version 5.15.1.0, module défaillant ntdll.dll, version 5.1.2600.2180, adresse de défaillance 0x00010e03. Error - 27/06/2009 15:43:57 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu Error - 27/06/2009 15:52:40 | Computer Name = MAISON-FDB4413B | Source = EventSystem | ID = 4609 Description = Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est 800706BA à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events ier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreu [ System Events ] Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite Guard n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite MailGuard helper service. Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite MailGuard helper service n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7001 Description = Le service Avira Premium Security Suite MailGuard dépend du service Avira Premium Security Suite MailGuard helper service qui n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:48 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7001 Description = Le service Avira Premium Security Suite WebGuard dépend du service Avira Premium Security Suite MailGuard helper service qui n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:42:56 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7031 Description = Le service Appel de procédure distante (RPC) s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer l'ordinateur. Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service General Purpose USB Driver (adildr.sys) n'a pas pu démarrer en raison de l'erreur : %%1058 Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite Guard. Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7000 Description = Le service Avira Premium Security Suite Guard n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 27/06/2009 15:45:00 | Computer Name = MAISON-FDB4413B | Source = Service Control Manager | ID = 7009 Description = Délai (30000 millisecondes) d'attente pour une connexion du service Avira Premium Security Suite MailGuard helper service. < End of report >

gen-hackman · Answer

ben oui ca ressemble beaucoup à Conficker

http://www.commentcamarche.net/forum/affich 13032069 un virus empeche l instalation d un antivirus?page=2#29

lili512 · Answer

heuu au féte j'ai fais des recherches sur conficker et j'ai installé un outil qui le detecte et le suprimme d'un site de windows et a la fin du scan il m'informe qu'il nya aucun programme malveillant et aucune trace de conficker et que mon pc est cleen bref donc je ne crois pas que se soit conficker ah oui j'ai tjr un blem avc les liens mdr surtt ceux de chiquitine lol bein il me dit qu'il ne peut pas sconécté au serveur et que c impossible yaurait il un autre lien??

gen-hackman · Answer

j attends les actions demandées et ne repondrai qu'en ayant eu les rapports correspondants

lili512 · Answer

le lien ne marche pas te ce logiciel a été suspendu par son auteur

gen-hackman · Answer

et oui forcement conficker empeche de charger des outils de desinfections

le lien marche tres bien chez moi

je te l envoie renommé a partir de mon compte :

http://sd-1.archive-host.com/membres/up/829108531491024/lili512.exe

lili512 · Answer

dsl ma ça ne marche tjr pas

gen-hackman · Answer

supprime Combofix , retelecharge-le , et renomme-le à l'enregistrement

et refais un passage avec

lili512 · Answer

ComboFix 09-06-28.04 -  29/06/2009 15:48.2 - NTFSx86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.1023.699 [GMT 2:00]
Lancé depuis: c:\documents and settings\Bureau\pioytmp.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((   Fichiers créés du 2009-05-28 au 2009-06-29  ))))))))))))))))))))))))))))))))))))
.

2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	C:\DVDVideoSoft
2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	c:\program files\Fichiers communs\DVDVideoSoft
2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	c:\program files\DVDVideoSoft
2009-06-29 12:44 . 2002-01-05 13:37	344064	----a-w-	c:\windows\system32\msvcr70.dll
2009-06-28 18:19 . 2001-08-17 19:56	7552	-c--a-w-	c:\windows\system32\dllcache\sonypvu1.sys
2009-06-28 18:19 . 2001-08-17 19:56	7552	----a-w-	c:\windows\system32\drivers\SONYPVU1.SYS
2009-06-28 12:12 . 2009-06-28 12:12	--------	d-----w-	c:\program files\Avira
2009-06-28 06:09 . 2004-02-13 11:33	196608	----a-w-	c:\windows\autoclk.exe
2009-06-28 06:09 . 2003-02-21 17:52	49143	----a-w-	c:\windows\system32\drivers\adildr.sys
2009-06-28 06:09 . 2002-08-15 14:36	135168	----a-w-	c:\windows\system32\unaddrv.exe
2009-06-28 06:09 . 2002-05-09 13:25	155648	----a-w-	c:\windows\system32\AdADIx32.dll
2009-06-28 06:09 . 2001-02-09 09:43	4981	----a-w-	c:\windows\system32\AdADIx2K.dll
2009-06-28 06:09 . 2001-02-08 10:05	46892	----a-w-	c:\windows\system32\ADADIX16.DLL
2009-06-28 06:09 . 2001-05-24 13:24	22395	----a-w-	c:\windows\system32\drivers\fpga.bin
2009-06-27 17:26 . 2009-06-27 17:26	--------	d--h--w-	c:\windows\PIF
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\program files\Java
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\program files\Fichiers communs\Java
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\documents and settings\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150010}
2009-06-27 11:30 . 2009-06-27 11:30	--------	d-----w-	c:\documents and settings\Application Data\CyberLink
2009-06-27 11:26 . 2009-06-27 11:26	--------	d-----w-	c:\documents and settings\All Users\Application Data\CyberLink
2009-06-27 11:26 . 2009-06-27 11:26	--------	d-----w-	c:\program files\CyberLink
2009-06-27 10:03 . 2009-06-27 10:03	165296	----a-w-	c:\documents and settings\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
2009-06-27 09:23 . 2009-06-27 09:23	--------	d-----w-	c:\documents and settings\Local Settings\Application Data\Ahead
2009-06-26 15:52 . 2003-06-18 23:31	17920	----a-w-	c:\windows\system32\mdimon.dll
2009-06-26 15:52 . 2009-06-26 15:52	--------	d-----w-	c:\program files\Microsoft.NET
2009-06-26 15:51 . 2009-06-26 15:52	--------	d-----w-	c:\windows\SHELLNEW
2009-06-26 15:48 . 2009-06-26 15:48	--------	d--h--r-	C:\MSOCache
2009-06-26 13:23 . 2009-06-26 13:23	--------	d-s---w-	c:\documents and settings\UserData
2009-06-26 13:07 . 2009-06-29 13:47	--------	d-----w-	c:\documents and settings\Application Data\DMCache
2009-06-26 13:07 . 2009-06-27 10:03	--------	d-----w-	c:\documents and settings\Application Data\IDM
2009-06-26 13:07 . 2009-06-27 11:23	--------	d-----w-	c:\program files\Internet Download Manager
2009-06-24 17:25 . 2009-06-24 17:32	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2009-06-24 17:25 . 2009-06-24 17:31	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-24 14:23 . 2009-06-24 14:23	--------	d-----w-	c:\program files\7-Zip
2009-06-23 12:57 . 2009-06-23 12:57	--------	d-----r-	c:\documents and settings\LocalService\Favoris
2009-06-22 12:25 . 2009-06-22 12:25	--------	d-----w-	c:\documents and settings\Local Settings\Application Data\Identities
2009-06-19 16:23 . 2009-06-19 16:24	--------	d-----w-	c:\documents and settings\Application Data\Media Player Classic
2009-06-19 16:23 . 2004-01-11 22:00	348160	----a-w-	c:\windows\system32\msvcr71.dll
2009-06-19 16:23 . 2003-03-19 03:14	499712	----a-w-	c:\windows\system32\msvcp71.dll
2009-06-17 16:50 . 2004-08-03 21:08	31616	-c--a-w-	c:\windows\system32\dllcache\usbccgp.sys
2009-06-17 16:50 . 2004-08-03 21:08	31616	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2009-06-17 12:16 . 2009-06-24 17:32	--------	d-----w-	c:\program files\MSN Messenger
2009-06-16 16:20 . 2009-06-16 16:20	--------	d-----w-	c:\documents and settings\All Users\Application Data
View_Profiles
2009-06-16 13:46 . 2009-06-24 12:34	--------	d-----w-	c:\documents and settings\allam\Contacts
2009-06-16 13:45 . 2009-06-16 13:45	--------	dc----w-	c:\windows\system32\DRVSTORE
2009-06-14 12:59 . 2009-06-14 13:08	--------	d-----w-	c:\program files\Vilma
2009-06-14 12:56 . 2009-06-14 12:56	--------	d--h--w-	c:\windows\system32\GroupPolicy
2009-06-14 12:40 . 2009-06-29 13:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2009-06-14 12:04 . 2009-06-23 13:13	--------	d---a-w-	c:\documents and settings\All Users\Application Data\TEMP
2009-06-13 19:16 . 2009-06-13 19:16	--------	d-----w-	c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-06-13 19:12 . 2009-06-13 19:13	--------	d-----w-	c:\documents and settings\allam\Local Settings\Application Data\Adobe
2009-06-13 19:11 . 2009-06-13 19:11	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-06-13 19:07 . 2004-08-03 21:08	26496	-c--a-w-	c:\windows\system32\dllcache\usbstor.sys
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Huawei Technologies
2009-06-13 19:00 . 2003-12-01 07:36	117785	----a-r-	c:\windows\system32\drivers\adiusbae.sys
2009-06-13 19:00 . 2009-06-28 06:09	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Fichiers communs\InstallShield
2009-06-13 18:06 . 2001-08-17 21:59	3072	----a-w-	c:\windows\system32\drivers\audstub.sys
2009-06-13 18:05 . 2004-08-04 00:39	58496	----a-w-	c:\windows\system32\driversedbook.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	-c--a-w-	c:\windows\system32\dllcache
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	----a-w-	c:\windows\system32\drivers
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3908864	----a-w-	c:\windows\system32
v4_disp.dll
2009-06-13 18:04 . 2001-08-17 20:13	27165	----a-w-	c:\windows\system32\drivers\fetnd5.sys
2009-06-13 18:04 . 2004-08-04 00:54	77312	----a-w-	c:\windows\system32\usbui.dll
2009-06-13 18:04 . 2004-08-03 23:07	44672	----a-w-	c:\windows\system32\drivers\UAGP35.SYS
2009-06-13 18:02 . 2009-06-27 11:26	--------	d-----w-	c:\documents and settings\All Users\Bureau

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-28 06:09 . 2009-06-28 06:09	26	----a-w-	c:\windows\system32\drivers\adidsl.cfg
2009-06-23 16:45 . 2009-06-13 16:13	86331	----a-w-	c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-14 12:05 . 2002-09-07 00:00	48616	----a-w-	c:\windows\system32\perfc00C.dat
2009-06-14 12:05 . 2002-09-07 00:00	367658	----a-w-	c:\windows\system32\perfh00C.dat
2009-06-13 16:30 . 2009-06-13 16:30	--------	d-----w-	c:\program files\Fichiers communs\Nero
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Ahead
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Fichiers communs\Ahead
2009-06-13 16:14 . 2009-06-13 16:14	--------	d-----w-	c:\program files\microsoft frontpage
2009-06-13 16:13 . 2009-06-13 16:13	--------	d-----w-	c:\program files\Services en ligne
2009-06-13 16:11 . 2009-06-13 16:11	21892	----a-w-	c:\windows\system32\emptyregdb.dat
.

(((((((((((((((((((((((((((((   SnapShot@2009-06-26_13.20.50   )))))))))))))))))))))))))))))))))))))))))
.
+ 1999-11-25 00:40 . 1999-11-25 00:40	40960              c:\windows\system32\VBAME.DLL
+ 2009-06-26 15:52 . 2003-06-18 23:31	18944              c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	35328              c:\windows\system32\spool\drivers\w32x86\mdiui.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	35328              c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
+ 1998-03-25 03:54 . 1998-03-25 03:54	15872              c:\windows\system32\SCP32.DLL
+ 1998-08-09 17:07 . 1998-08-09 17:07	94208              c:\windows\system32\MSSTKPRP.DLL
+ 1999-03-15 10:52 . 1999-03-15 10:52	57344              c:\windows\system32\MFC42FRA.DLL
+ 2009-06-27 13:33 . 2004-12-06 18:04	49250              c:\windows\system32\javaw.exe
+ 2009-06-27 13:33 . 2004-12-06 18:04	49248              c:\windows\system32\java.exe
+ 2003-07-31 17:46 . 2003-07-31 17:46	42128              c:\windows\system32\FM20FRA.DLL
+ 2009-06-28 12:12 . 2008-03-12 10:29	94465              c:\windows\system32\avsda.dll
+ 2009-06-26 15:52 . 2009-06-26 15:52	23040              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	61440              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	27136              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	11264              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	86016              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	12288              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 1999-04-06 15:06 . 1999-04-06 15:06	7680              c:\windows\system32\MSPRPFR.DLL
+ 2009-06-26 15:52 . 2009-06-26 15:52	4096              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2002-08-21 03:13 . 2002-08-21 03:13	189952              c:\windows\system32\WISPTIS.EXE
+ 2009-06-26 15:52 . 2003-06-18 23:31	758784              c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	758784              c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
+ 2000-04-03 15:52 . 2000-04-03 15:52	151552              c:\windows\system32\RDOCURS.DLL
+ 2000-05-24 04:45 . 2000-05-24 04:45	118784              c:\windows\system32\MSSTDFMT.DLL
+ 2000-05-11 11:06 . 2000-05-11 11:06	397312              c:\windows\system32\MSRDO20.DLL
+ 2009-06-27 13:33 . 2004-12-06 19:31	127078              c:\windows\system32\javaws.exe
+ 2002-08-21 03:10 . 2002-08-21 03:10	204800              c:\windows\system32\INKED.DLL
+ 2009-06-13 18:02 . 2009-06-26 18:45	188200              c:\windows\system32\FNTCACHE.DAT
+ 2009-06-26 15:52 . 2009-06-26 15:52	409600              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	286720              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	249856              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	794624              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	135168              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	593920              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2003-08-03 16:56 . 2003-08-03 16:56	1146184              c:\windows\system32\FM20.DLL
+ 2009-06-28 13:36 . 2009-06-01 07:51	23709120              c:\windows\system32\MRT.exe
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5752176]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-10-28 2680240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-07-20 7110656]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-07-20 86016]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 225280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 105328]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-08 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_01\bin\jusched.exe" [2004-12-06 36975]
"nwiz"="nwiz.exe" - c:\windows\system32
wiz.exe [2005-07-20 1589248]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-06-20 147456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
DSLMON.lnk - c:\program files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe [2009-6-28 929870]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"e:\manou\logiciel\wrar380fr.exe"=
"c:\WINDOWS\system32\nwiz.exe"=
"c:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe"=
"c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"=
"c:\WINDOWS\system32\NeroCheck.exe"=
"c:\WINDOWS\system32\wuauclt.exe"=
"c:\Program Files\MSN Messenger\usnsvc.exe"=
"c:\WINDOWS\SOUNDMAN.EXE"=
"c:\Program Files\MSN Messenger\msnmsgr.exe"= c:\Program Files\MSN Messenger\MsnMsgr.Exe
"c:\Program Files\MSN Messenger\livecall.exe"=
"c:\Program Files\Internet Download Manager\IDMan.exe"=
"c:\Program Files\Internet Download Manager\IEMonitor.exe"=

R1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys --> c:\windows\system32\DRIVERS\avfwot.sys [?]
R3 abp470n5;abp470n5;\??\c:\windows\system32\drivers
osghn.sys --> c:\windows\system32\drivers
osghn.sys [?]
R3 adiusbae;USB ADSL LAN Adapter;c:\windows\system32\drivers\adiusbae.sys [13/06/2009 21:00 117785]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys --> c:\windows\system32\DRIVERS\avfwim.sys [?]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - avgio
*Deregistered* - avipbb
*Deregistered* - ssmdrv
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 15:50
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(1144)
c:\windows\system32\avsda.dll
.
Heure de fin: 2009-06-29 15:51
ComboFix-quarantined-files.txt  2009-06-29 13:51

Avant-CF: 28 002 467 840 octets libres
Après-CF: 28 818 153 472 octets libres

218

gen-hackman · Answer

DEBRANCHE TON CABLE INTERNET POUR CETTE OPERATION __________________________________________________________ =>/!\ ATTENTION /!\ Le script qui suit a été écrit spécialement cet ordinateur,<= =>il est fort déconseillé de le transposer sur un autre ordinateur !<=====| --------------------------------------------------------------- Toujours avec toutes les protections désactivées, fais ceci : • Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes) • Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) : ---------------------------------------------------------- Driver:: abp470n5 Registry:: [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system] "DisableTaskMgr"= 0 "DisableRegistryTools"= 0 [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000000 "UpdatesDisableNotify"=dword:00000000 "AntiVirusOverride"=dword:00000000 "FirewallOverride"=dword:00000000 "UacDisableNotify"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000000 "AntiVirusDisableNotify"=dword:00000000 "FirewallDisableNotify"=dword:00000000 "FirewallOverride"=dword:00000000 "UpdatesDisableNotify"=dword:00000000 "UacDisableNotify"=dword:00000000 ------------------------------------------------------------------ • Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt • Quitte le Bloc Notes • Fais un glisser/déposer de ce fichier CFScript sur le fichier C-Fix.exe (combofix) Comme ceci • Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé. • Une fois le scan achevé, un rapport va s'afficher: poste son contenu. • Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

lili512 · Answer

ComboFix 09-06-28.06 - 29/06/2009 16:46.3 - NTFSx86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.1023.757 [GMT 2:00]
Lancé depuis: c:\documents and settings\Bureau\cfix.exe
Commutateurs utilisés :: c:\documents and settings\Bureau\CFScript.txt
AV: Avira Premium Security Suite *On-access scanning disabled* (Outdated) {11638345-E4FC-4BEE-BB73-EC754659C5F6}
AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Avira Firewall *disabled* {11638345-E4FC-4BEE-BB73-EC754659C5F6}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ABP470N5
-------\Service_abp470n5


(((((((((((((((((((((((((((((   Fichiers créés du 2009-05-28 au 2009-06-29  ))))))))))))))))))))))))))))))))))))
.

2009-06-29 14:29 . 2008-03-06 10:15	71464	----a-w-	c:\windows\system32\drivers\avfwim.sys
2009-06-29 14:29 . 2008-02-07 08:00	66176	----a-w-	c:\windows\system32\drivers\avfwot.sys
2009-06-29 14:29 . 2008-01-21 16:12	41792	----a-w-	c:\windows\system32\drivers\avgntdd.sys
2009-06-29 14:29 . 2008-01-21 16:11	22336	----a-w-	c:\windows\system32\drivers\avgntmgr.sys
2009-06-29 14:29 . 2008-03-04 11:28	79424	----a-w-	c:\windows\system32\drivers\avipbb.sys
2009-06-29 14:29 . 2009-06-29 14:29	--------	d-----w-	c:\program files\Avira
2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	C:\DVDVideoSoft
2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	c:\program files\Fichiers communs\DVDVideoSoft
2009-06-29 12:44 . 2009-06-29 12:44	--------	d-----w-	c:\program files\DVDVideoSoft
2009-06-29 12:44 . 2002-01-05 13:37	344064	----a-w-	c:\windows\system32\msvcr70.dll
2009-06-28 18:19 . 2001-08-17 19:56	7552	-c--a-w-	c:\windows\system32\dllcache\sonypvu1.sys
2009-06-28 18:19 . 2001-08-17 19:56	7552	----a-w-	c:\windows\system32\drivers\SONYPVU1.SYS
2009-06-28 06:09 . 2004-02-13 11:33	196608	----a-w-	c:\windows\autoclk.exe
2009-06-28 06:09 . 2003-02-21 17:52	49143	----a-w-	c:\windows\system32\drivers\adildr.sys
2009-06-28 06:09 . 2002-08-15 14:36	135168	----a-w-	c:\windows\system32\unaddrv.exe
2009-06-28 06:09 . 2002-05-09 13:25	155648	----a-w-	c:\windows\system32\AdADIx32.dll
2009-06-28 06:09 . 2001-02-09 09:43	4981	----a-w-	c:\windows\system32\AdADIx2K.dll
2009-06-28 06:09 . 2001-02-08 10:05	46892	----a-w-	c:\windows\system32\ADADIX16.DLL
2009-06-28 06:09 . 2001-05-24 13:24	22395	----a-w-	c:\windows\system32\drivers\fpga.bin
2009-06-27 17:26 . 2009-06-27 17:26	--------	d--h--w-	c:\windows\PIF
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\program files\Java
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\program files\Fichiers communs\Java
2009-06-27 13:33 . 2009-06-27 13:33	--------	d-----w-	c:\documents and settings\m\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150010}
2009-06-27 11:30 . 2009-06-27 11:30	--------	d-----w-	c:\documents and settings\Application Data\CyberLink
2009-06-27 11:26 . 2009-06-27 11:26	--------	d-----w-	c:\documents and settings\All Users\Application Data\CyberLink
2009-06-27 11:26 . 2009-06-27 11:26	--------	d-----w-	c:\program files\CyberLink
2009-06-27 10:03 . 2009-06-27 10:03	165296	----a-w-	c:\documents and settings\allam\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
2009-06-27 09:23 . 2009-06-27 09:23	--------	d-----w-	c:\documents and settings\allam\Local Settings\Application Data\Ahead
2009-06-26 15:52 . 2003-06-18 23:31	17920	----a-w-	c:\windows\system32\mdimon.dll
2009-06-26 15:52 . 2009-06-26 15:52	--------	d-----w-	c:\program files\Microsoft.NET
2009-06-26 15:51 . 2009-06-26 15:52	--------	d-----w-	c:\windows\SHELLNEW
2009-06-26 15:48 . 2009-06-26 15:48	--------	d--h--r-	C:\MSOCache
2009-06-26 13:23 . 2009-06-26 13:23	--------	d-s---w-	c:\documents and settings\UserData
2009-06-26 13:07 . 2009-06-29 14:45	--------	d-----w-	c:\documents and settings\Application Data\DMCache
2009-06-26 13:07 . 2009-06-27 10:03	--------	d-----w-	c:\documents and settings\Application Data\IDM
2009-06-26 13:07 . 2009-06-27 11:23	--------	d-----w-	c:\program files\Internet Download Manager
2009-06-24 17:25 . 2009-06-24 17:32	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2009-06-24 17:25 . 2009-06-24 17:31	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-24 14:23 . 2009-06-24 14:23	--------	d-----w-	c:\program files\7-Zip
2009-06-23 12:57 . 2009-06-23 12:57	--------	d-----r-	c:\documents and settings\LocalService\Favoris
2009-06-22 12:25 . 2009-06-22 12:25	--------	d-----w-	c:\documents and settings\Local Settings\Application Data\Identities
2009-06-19 16:23 . 2009-06-19 16:24	--------	d-----w-	c:\documents and settings\Application Data\Media Player Classic
2009-06-19 16:23 . 2004-01-11 22:00	348160	----a-w-	c:\windows\system32\msvcr71.dll
2009-06-19 16:23 . 2003-03-19 03:14	499712	----a-w-	c:\windows\system32\msvcp71.dll
2009-06-17 16:50 . 2004-08-03 21:08	31616	-c--a-w-	c:\windows\system32\dllcache\usbccgp.sys
2009-06-17 16:50 . 2004-08-03 21:08	31616	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2009-06-17 12:16 . 2009-06-24 17:32	--------	d-----w-	c:\program files\MSN Messenger
2009-06-16 16:20 . 2009-06-16 16:20	--------	d-----w-	c:\documents and settings\All Users\Application Data
View_Profiles
2009-06-16 13:46 . 2009-06-24 12:34	--------	d-----w-	c:\documents and settings\Contacts
2009-06-16 13:45 . 2009-06-16 13:45	--------	dc----w-	c:\windows\system32\DRVSTORE
2009-06-14 12:59 . 2009-06-14 13:08	--------	d-----w-	c:\program files\Vilma
2009-06-14 12:56 . 2009-06-14 12:56	--------	d--h--w-	c:\windows\system32\GroupPolicy
2009-06-14 12:40 . 2009-06-29 14:29	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2009-06-14 12:04 . 2009-06-23 13:13	--------	d---a-w-	c:\documents and settings\All Users\Application Data\TEMP
2009-06-13 19:16 . 2009-06-13 19:16	--------	d-----w-	c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-06-13 19:12 . 2009-06-13 19:13	--------	d-----w-	c:\documents and settings\allam\Local Settings\Application Data\Adobe
2009-06-13 19:11 . 2009-06-13 19:11	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-06-13 19:07 . 2004-08-03 21:08	26496	-c--a-w-	c:\windows\system32\dllcache\usbstor.sys
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Huawei Technologies
2009-06-13 19:00 . 2003-12-01 07:36	117785	----a-r-	c:\windows\system32\drivers\adiusbae.sys
2009-06-13 19:00 . 2009-06-28 06:09	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-06-13 19:00 . 2009-06-13 19:00	--------	d-----w-	c:\program files\Fichiers communs\InstallShield
2009-06-13 18:06 . 2001-08-17 21:59	3072	----a-w-	c:\windows\system32\drivers\audstub.sys
2009-06-13 18:05 . 2004-08-04 00:39	58496	----a-w-	c:\windows\system32\driversedbook.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	-c--a-w-	c:\windows\system32\dllcache
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3198368	----a-w-	c:\windows\system32\drivers
v4_mini.sys
2009-06-13 18:04 . 2005-07-20 13:07	3908864	----a-w-	c:\windows\system32
v4_disp.dll
2009-06-13 18:04 . 2001-08-17 20:13	27165	----a-w-	c:\windows\system32\drivers\fetnd5.sys
2009-06-13 18:04 . 2004-08-04 00:54	77312	----a-w-	c:\windows\system32\usbui.dll
2009-06-13 18:04 . 2004-08-03 23:07	44672	----a-w-	c:\windows\system32\drivers\UAGP35.SYS

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-28 06:09 . 2009-06-28 06:09	26	----a-w-	c:\windows\system32\drivers\adidsl.cfg
2009-06-23 16:45 . 2009-06-13 16:13	86331	----a-w-	c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-14 12:05 . 2002-09-07 00:00	48616	----a-w-	c:\windows\system32\perfc00C.dat
2009-06-14 12:05 . 2002-09-07 00:00	367658	----a-w-	c:\windows\system32\perfh00C.dat
2009-06-13 16:30 . 2009-06-13 16:30	--------	d-----w-	c:\program files\Fichiers communs\Nero
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Ahead
2009-06-13 16:29 . 2009-06-13 16:29	--------	d-----w-	c:\program files\Fichiers communs\Ahead
2009-06-13 16:14 . 2009-06-13 16:14	--------	d-----w-	c:\program files\microsoft frontpage
2009-06-13 16:13 . 2009-06-13 16:13	--------	d-----w-	c:\program files\Services en ligne
2009-06-13 16:11 . 2009-06-13 16:11	21892	----a-w-	c:\windows\system32\emptyregdb.dat
.

(((((((((((((((((((((((((((((   SnapShot@2009-06-26_13.20.50   )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-29 14:49 . 2009-06-29 14:49	16384              c:\windows	emp\Perflib_Perfdata_348.dat
+ 1999-11-25 00:40 . 1999-11-25 00:40	40960              c:\windows\system32\VBAME.DLL
+ 2009-06-26 15:52 . 2003-06-18 23:31	18944              c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	35328              c:\windows\system32\spool\drivers\w32x86\mdiui.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	35328              c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
+ 1998-03-25 03:54 . 1998-03-25 03:54	15872              c:\windows\system32\SCP32.DLL
+ 1998-08-09 17:07 . 1998-08-09 17:07	94208              c:\windows\system32\MSSTKPRP.DLL
+ 1999-03-15 10:52 . 1999-03-15 10:52	57344              c:\windows\system32\MFC42FRA.DLL
+ 2009-06-27 13:33 . 2004-12-06 18:04	49250              c:\windows\system32\javaw.exe
+ 2009-06-27 13:33 . 2004-12-06 18:04	49248              c:\windows\system32\java.exe
+ 2003-07-31 17:46 . 2003-07-31 17:46	42128              c:\windows\system32\FM20FRA.DLL
+ 2009-06-29 14:29 . 2007-03-01 08:34	28352              c:\windows\system32\drivers\ssmdrv.sys
+ 2009-06-29 14:29 . 2008-03-12 10:29	94465              c:\windows\system32\avsda.dll
+ 2009-06-26 15:52 . 2009-06-26 15:52	23040              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	61440              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	27136              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	11264              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	86016              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	12288              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 1999-04-06 15:06 . 1999-04-06 15:06	7680              c:\windows\system32\MSPRPFR.DLL
+ 2009-06-26 15:52 . 2009-06-26 15:52	4096              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2002-08-21 03:13 . 2002-08-21 03:13	189952              c:\windows\system32\WISPTIS.EXE
+ 2009-06-26 15:52 . 2003-06-18 23:31	758784              c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
+ 2009-06-26 15:52 . 2003-06-18 23:31	758784              c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
+ 2000-04-03 15:52 . 2000-04-03 15:52	151552              c:\windows\system32\RDOCURS.DLL
+ 2000-05-24 04:45 . 2000-05-24 04:45	118784              c:\windows\system32\MSSTDFMT.DLL
+ 2000-05-11 11:06 . 2000-05-11 11:06	397312              c:\windows\system32\MSRDO20.DLL
+ 2009-06-27 13:33 . 2004-12-06 19:31	127078              c:\windows\system32\javaws.exe
+ 2002-08-21 03:10 . 2002-08-21 03:10	204800              c:\windows\system32\INKED.DLL
+ 2009-06-13 18:02 . 2009-06-26 18:45	188200              c:\windows\system32\FNTCACHE.DAT
+ 2009-06-26 15:52 . 2009-06-26 15:52	409600              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	286720              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	249856              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	794624              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	135168              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-06-26 15:52 . 2009-06-26 15:52	593920              c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2003-08-03 16:56 . 2003-08-03 16:56	1146184              c:\windows\system32\FM20.DLL
+ 2009-06-28 13:36 . 2009-06-01 07:51	23709120              c:\windows\system32\MRT.exe
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5752176]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-10-28 2680240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-07-20 7110656]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-07-20 86016]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 225280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 105328]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-08 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_01\bin\jusched.exe" [2004-12-06 36975]
"nwiz"="nwiz.exe" - c:\windows\system32
wiz.exe [2005-07-20 1589248]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-06-20 147456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
DSLMON.lnk - c:\program files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe [2009-6-28 929870]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"e:\manou\logiciel\wrar380fr.exe"=
"c:\WINDOWS\system32\nwiz.exe"=
"c:\Program Files\Huawei Technologies\Huawei SmartAX MT810\dslmon.exe"=
"c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"=
"c:\WINDOWS\system32\NeroCheck.exe"=
"c:\WINDOWS\system32\wuauclt.exe"=
"c:\Program Files\MSN Messenger\usnsvc.exe"=
"c:\WINDOWS\SOUNDMAN.EXE"=
"c:\Program Files\MSN Messenger\msnmsgr.exe"= c:\Program Files\MSN Messenger\MsnMsgr.Exe
"c:\Program Files\MSN Messenger\livecall.exe"=
"c:\Program Files\Internet Download Manager\IDMan.exe"=
"c:\Program Files\Internet Download Manager\IEMonitor.exe"=

R1 avfwot;avfwot;c:\windows\system32\drivers\avfwot.sys [29/06/2009 16:29 66176]
R2 AntiVirFirewallService;Avira Premium Security Suite Firewall;c:\program files\Avira\Avira Premium Security Suite\avfwsvc.exe [29/06/2009 16:29 344321]
R3 adiusbae;USB ADSL LAN Adapter;c:\windows\system32\drivers\adiusbae.sys [13/06/2009 21:00 117785]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\drivers\avfwim.sys [29/06/2009 16:29 71464]
S2 AntiVirMailService;Avira Premium Security Suite MailGuard;c:\program files\Avira\Avira Premium Security Suite\avmailc.exe [29/06/2009 16:29 164097]
S2 antivirwebservice;Avira Premium Security Suite WebGuard;c:\program files\Avira\Avira Premium Security Suite\avwebgrd.exe [29/06/2009 16:29 254209]
S2 AVEService;Avira Premium Security Suite MailGuard helper service;c:\program files\Avira\Avira Premium Security Suite\avesvc.exe [29/06/2009 16:29 41217]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - ABP470N5
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
LSP: avsda.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 16:49
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(1124)
c:\windows\system32\avsda.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32
vsvc32.exe
c:\windows\system32undll32.exe
c:\windows\system32
otepad.exe
.
**************************************************************************
.
Heure de fin: 2009-06-29 16:51 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-06-29 14:51
ComboFix2.txt  2009-06-29 13:51

Avant-CF: 28 749 389 824 octets libres
Après-CF: 29 359 140 864 octets libres

234

gen-hackman · Answer

Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
  - Coche    Afficher les fichiers et dossiers cachés
  - Décoche Masquer les extensions des fichiers dont le type est connu
  - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)
clique sur Appliquer, puis OK.

N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :

 c:\windows\system32\drivers\avfwot.sys 

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

lili512 · Answer

BJR
heu depuis hier j'essaye d'acceder au site mais rien a faire j'ai attendu hier 28 minute et il ne c pas ouvert et aujourdhui pareil eske c du au virus?

gen-hackman · Answer

clic droit dessus / envoyer vers / dossier compressés 

ici : http://www.cijoint.fr/

renvoie le lien qui apparaitra

lili512 · Answer

heuu excuse moi mais j'ai pas compri je dois cliké sur koi?

gen-hackman · Answer

ca :

c:\windows\system32\drivers\avfwot.sys

lili512 · Answer

BJR 
dsl pour le retard voila le lien: http://www.cijoint.fr/cjlink.php?file=cj200907/cij61g9uNo.zip

gen-hackman · Answer

bon c'est un driver sain d'AVIRA

Findykill a été remis en service essaie de le retelecharger et faire l option recherche avec stp

lili512 · Answer

re heu non je n'arrive tjr pas a telecharger findykill cette fois il mafficher HTTP 404 non trouvé la page est introuvable ah oui depuis quelques temp avira me sort des erreurs du genre :
ERROR the application module C/programme files /avira/avira premium security suite /usrreq.exe cannot be found or has been modified or destroyed the user request cannot be started please check your instalation et elle s'affiche regulierement

gen-hackman · Answer

salut tu as des restes de Kaspersky :

Désinstallation Antivirus , Parefeu , Antispyware

lili512 · Answer

c bon jlé desinstallé

gen-hackman · Answer

redemarre ton pc et vois si ca ne s'est pas amelioeré

lili512 · Answer

heuu non toujour pas ça a empiréééé aaaaaaaa ça n'arréte plus

gen-hackman · Answer

> Désactive la restauration système, pour cela , suis les instructions des liens: Lien XP Lien Vista _________________________________________________ 3:> Télécharge ToolsCleaner2 sur ton Bureau. * Double-clique sur ToolsCleaner2.exe pour le lancer(clic droit en tant qu'admmin sous Vista). * Clique sur Recherche et laisse le scan agir. * Clique sur Suppression pour finaliser. * Tu peux, si tu le souhaites, te servir des Options Facultatives. * Clique sur Quitter pour obtenir le rapport. * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). _________________________________________________ 4:>essaies de telecharger les logiciels d'un autre PC et de les graver (les cles usb s'infectant trop facilement) ___________________________________________________ > Télécharge Dr Web CureIt sur ton Bureau : redemarre en mode sans échec - Double clique (clic droit "en tant qu'admin" sous Vista) et ensuite clique sur ; - Clique à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton . Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X". - Lorsque le scan rapide est terminé, clique sur le menu puis ; Choisis l'onglet , et décoche . Clique ensuite sur . - De retour à la fenêtre principale : clique pour activer - Clique le bouton avec flèche verte sur la droite, et le scan débutera. - Clique pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter". - Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône , au dessous, et choisis . - Du menu principal de l'outil, au haut à gauche, clique sur le menu et choisis . Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv - Ferme Dr.Web Cureit - Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage). - Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.

lili512 · Answer

merci mais c bon j'en ai marre je v le formaté et gravé les truc dont j'ai besoin 
bonne continuation

gen-hackman · Answer

pas de soucis....desolé de n'avoir pu mener à bien la desinfection et bon courage

Un virus empeche l'instalation d'un antivirus

56 réponses

Discussions similaires

Newsletters